eIDAS: An empty wallet is a useless wallet

The European Union (EU) is making strides toward seamless digital integration with the introduction of the European Digital Identity Regulation, or eIDAS 2.0.

eIDAS for Open Banking

eIDAS: An empty wallet is a useless wallet

Enacted in May 2024, this ambitious framework aims to dramatically alter cross-border digital services by providing EU citizens, residents and businesses with a secure, interoperable digital identity solution.

While the initiative is well-intentioned, its implementation raises significant questions and concerns.

A Step Towards Digital Unity

At the heart of eIDAS 2.0 lies the European digital identity wallet.

This mobile app allows users to authenticate their identity, electronically sign documents, and store official records such as driving licenses and certificates.

The wallets, available free of charge, aim to simplify digital interactions, ensuring users across the EU can access public and private services with ease.

Each member state is mandated to provide at least one wallet solution, underscoring the EU’s commitment to inclusivity and accessibility.

This initiative aligns with the principles of the single market, particularly the free movement of goods, services, capital and people.

Reliable digital identification is a key enabler of these freedoms, promising to streamline cross-border activities in an increasingly digital age.

Challenges Loom Large

Despite its potential, the regulation faces notable implementation challenges.

Much of the framework remains skeletal, with essential technical specifications and large-scale pilot programs still in development.

The European Commission’s forthcoming implementing acts are pivotal. These acts will outline key functionalities and certification requirements, setting the timeline for the wallets’ rollout.

However, ambiguity around these details has left stakeholders – particularly in the financial sector – uncertain about the practical implications.

Member states must provide digital wallets within 24 months of the implementing acts’ adoption, yet with pilots and specifications ongoing, meeting these deadlines will be daunting.

Much is riding on the Commission’s implementing acts, and their finalisation is awaited as eagerly as Christmas morning,” says Peter Jansson, Head of Authentication and Mobile Payments, Finance Finland.

“The implementing acts on the wallet’s key functions and certification are crucial, since their adoption timeline will also determine the transition periods: the revised regulation mandates member states to provide digital identity wallets to their citizens within 24 months of the adoption of the implementing acts.

The Commission is expected to issue more implementing acts in 2025, with plans to amend the adopted acts along the way.”

Implications for the Financial Sector

The financial industry, while broadly supportive of cross-border digital services, harbours concerns about its obligations under eIDAS 2.0. Financial institutions are required to accept digital identity wallets for tasks like opening accounts, applying for loans or initiating payments.

This mandate introduces complexities around payment transaction responsibilities, which remain undefined.

Payments are already governed by sector-specific regulations, such as the EU’s Payment Services Directive (PSD2), and eIDAS 2.0 must integrate seamlessly with these existing frameworks.

Without clear guidance, financial institutions risk operational and regulatory conflicts.

Additionally, questions linger about the role of digital identity wallets in payments.

The regulation mentions initiating transactions but does not clarify how payments will be authorised. Banks may still retain their traditional role in this process, but the lack of certainty is unsettling for an industry that thrives on precision.

Unfinished Business

The regulation’s ambitious scope underscores the EU’s commitment to digital transformation, but the challenges of implementation cannot be ignored.

By mandating wallet acceptance across designated sectors within 36 months – likely by late 2027 – the Commission risks overwhelming stakeholders with vague standards and underdeveloped infrastructure.

Key issues, such as the division of responsibility in payments and interoperability with existing systems, remain unresolved.

Policymakers and regulators face the formidable task of interpreting and clarifying these provisions while balancing innovation with regulatory compliance.

The European Digital Identity Regulation holds immense promise for enhancing cross-border digital interactions and unlocking new opportunities for citizens and businesses.

However, its success hinges on swift action from the Commission to finalise technical specifications, clarify obligations and establish robust standards.

Without these steps, the initiative risks becoming a case of overreach, with its potential benefits overshadowed by operational and regulatory complexities.

Collaboration between regulators, member states, and private-sector stakeholders will be essential to ensure eIDAS 2.0 delivers on its transformative vision.

 

The post eIDAS: An empty wallet is a useless wallet appeared first on Payments Cards & Mobile.