EU Commission undermines data protection of the digital wallet

The European Commission is reportedly watering down a core privacy feature of the upcoming EUDI (European Digital Identity) Wallet, according to recent reporting. This digital wallet aims to provide users with a secure and convenient way to manage their identity documents and other credentials digitally. The "need-to-know" principle, which would have limited the data shared to only what is strictly necessary for a specific transaction, was considered a significant privacy safeguard. The EUDI Wallet was designed to allow users to selectively disclose only the data points required for a particular service or verification. For instance, when proving age for entry into a venue, only the confirmation of being over 18 would be shared, not the full date of birth. This granular control was a key aspect of ensuring user privacy and data minimization within the digital identity framework. This revision to the "need-to-know" principle could have significant implications for user privacy and the overall trust in the EUDI Wallet. By potentially allowing for broader data sharing than initially intended, the Commission's move risks undermining the privacy-by-design ethos that was central to the wallet's development, potentially making it less attractive to citizens concerned about their digital footprint.