Skip to content
DRAFT REPORT (COM(2021)0281 – C90200/2021 – 2021/0136(COD))

On the proposal for a regulation of the European Parliament and of the Council amending Regulation (EU) No 910/2014 as regards establishing a framework for a European Digital Identity

ITRE-PR-732707

Committee on Industry, Research and Energy · Rapporteur: Romana Jerković

Official HTML ↗ PDF DOCX
✦ In shortFull text
✦ In short · AI summary of this text, generated 26 Sept 2026

Written by a language model from the full text only; every figure comes from the text. The paragraph links open the paragraph a statement rests on — check the text itself before relying on it.

This is the rapporteur's draft report on the Commission proposal to amend Regulation (EU) No 910/2014 and set up a framework for a European Digital Identity. It proposes many amendments to the Commission text. It would require each member state to issue at least one European Digital Identity Wallet, free of charge and voluntary to use, under a notified scheme of level of assurance 'high'. It adds rules on privacy by design, transaction history, zero knowledge proof, data minimisation, and a ban on combining wallet data with other data. It sets deadlines for the Commission to adopt implementing and delegated acts on technical specifications, certification standards and formats, and creates national competent authorities and a single point of contact.

Committee position. The rapporteur proposes to adopt Parliament's position at first reading with numerous amendments to the Commission proposal, strengthening privacy, user control, portability and governance of the European Digital Identity Wallet framework.

Key points

  1. Adds recitals stating that all Union citizens have the right to a digital identity under their sole control, legally recognised throughout the Union, and that digital identities could later be extended to connected objects.
  2. Amends recitals to say the framework complements national digital identity solutions by building a true internal market for cross-border electronic attestations of attributes, and should support the 'once only' principle.
  3. Requires the wallet to have a transaction history active by default, recording time and date, counterpart, data requested and data shared, stored even if the transaction was not concluded.
  4. Requires the wallet to allow zero knowledge proof, so claims can be verified without revealing the source data, and to use privacy by design and selective disclosure as standard features.
  5. Requires each member state to issue at least one European Digital Identity Wallet within 12 months of entry into force, under a notified scheme of level of assurance 'high', with cybersecurity by design.
  6. Makes wallet use voluntary and free of charge, and states that access to government services, the labour market and business must not be restricted for those not using the wallet.
  7. Requires the wallet to let users sign and validate qualified electronic signatures, create and validate qualified electronic seals, and transfer their attestations and configurations to another wallet of the same user.
  8. Requires the wallet to provide a recovery mechanism for lost, stolen or unavailable devices, synchronisation between wallets of the same user, and interoperability by design.
  9. Requires member states to raise awareness of the wallet through communication campaigns and to ensure citizens are trained in its use.
  10. Requires relying parties to communicate their intention to rely on wallets to the member state where they are established, to specify a clear and lawful purpose for each request, and to mutually authenticate with the wallet before any transaction.
  11. Requires the Commission to adopt implementing or delegated acts within 6 months of entry into force on technical specifications, certification standards, formats and security breach measures.
  12. Creates national competent authorities and a single point of contact in each member state, and requires providers of qualified electronic attestation of attributes to store and process personal data only in the Union.

Who is affected

  • Member states, which must issue at least one wallet, designate competent authorities and a single point of contact, and run awareness campaigns.
  • Users of the wallet, who gain rights to control their data, portability, recovery and a transaction history.
  • Relying parties, including very large online platforms and providers in transport, energy, banking, health and other sectors, which must accept wallets where strong user authentication is required.
  • Providers of qualified electronic attestation of attributes, which must store and process personal data only in the Union.
  • Persons with disabilities or special needs, including older people, for whom wallets and trust services must be accessible.

Figures and deadlines

  • At least one European Digital Identity Wallet per member state, to be issued by 12 months after entry into force.
  • Commission implementing or delegated acts on technical specifications, certification and formats within 6 months of entry into force.
  • Withdrawal of a compromised wallet if the breach is not remedied within three months of suspension or revocation.
  • Codes of conduct to be completed within 12 months and implemented within 18 months of adoption of the Regulation.
  • Delegated acts on additional measures under Article 24(2)(fa) start to apply from 24 months after entry into force.

Legal basis: Article 294(2) and Article 114 of the Treaty on the Functioning of the European Union.