The eID Wallet still doesn’t deserve your full trust

The European Union's upcoming eID Wallet, poised for widespread implementation, faces significant criticism regarding user privacy and data security. Civil society organizations, including EDRi, have raised urgent concerns that the current draft implementing acts do not sufficiently protect users from tracking, compelled data sharing, or the unnecessary disclosure of legal identity. These shortcomings threaten to undermine the fundamental rights of individuals interacting with digital public services across the bloc. Specifically, critics point to the potential for the eID Wallet to facilitate user tracking and the forced disclosure of sensitive personal information, even when not legally mandated. The absence of robust safeguards against these practices raises questions about the wallet's compliance with GDPR principles and its overall trustworthiness. The organizations are advocating for amendments to ensure that the wallet respects user autonomy and data minimization principles. The implications of these unresolved issues are substantial, potentially impacting millions of EU citizens and residents who will rely on the eID Wallet for accessing various digital services. Failure to address these privacy concerns could lead to a chilling effect on digital participation and a setback for the EU's ambitions in digital sovereignty. The European Commission is urged to revise the framework to align with high standards of data protection and user rights before the wallet's full deployment.