Digital Wallet: EU Commission wants Amazon to give you your face

The European Union is poised to launch its Digital Identity Wallet (EUDI Wallet) by the end of the year, a move intended to simplify digital identification for citizens. However, concerns are mounting from civil liberties organizations that proposed implementing regulations could undermine crucial data protection safeguards and potentially compel users to share biometric data. This development signals a critical juncture in the EU's digital policy, balancing convenience with privacy rights. Specifically, the controversy centers on proposed implementing acts that dictate how the EUDI Wallet will function in practice. A key point of contention is the proposal that "relying parties"—entities like companies and public bodies that will request identity verification—may not be required to obtain registration certificates in all member states. These certificates currently serve as a technical control mechanism, limiting the types of data relying parties can request based on their prior registration, thus preventing the misuse of sensitive information like health data for purposes like social media sign-ups. Civil rights advocates argue that making these certificates optional would weaken the regulatory framework, potentially allowing relying parties to bypass data limitations outlined in the foundational eIDAS regulation. This could lead to a situation where users are unintentionally compelled to share more personal data, including sensitive biometric information, than intended, compromising their privacy and digital sovereignty. The outcome of these regulatory debates will significantly shape the privacy landscape of digital interactions across the EU.