European Digital Identity Framework
TA-9-2024-0117 · P9_TA(2024)0117 · PE732.707
Written by a language model from the full text only; every figure comes from the text. The paragraph links open the paragraph a statement rests on — check the text itself before relying on it.
Parliament adopted its first-reading position on a regulation amending Regulation (EU) No 910/2014 to set up a European Digital Identity Framework. The text corresponds to the final act, Regulation (EU) 2024/1183.¶¶¶ The Commission states that web browsers must support qualified website authentication certificates (QWACs) only to display a website owner's identity data, without affecting their security policies or encryption methods.¶¶ The Commission states that wallet providers may not process personal data from the European Digital Identity Wallet for purposes other than delivering wallet services, and that unobservability prevents tracking of users' transactions.¶¶ The Commission adds that wallet providers may access certain personal data with the user's explicit consent, limited to what is necessary for each purpose.¶
Key points
- Parliament adopts its first-reading position on the proposed regulation amending Regulation (EU) No 910/2014 to establish a European Digital Identity Framework.¶¶
- The position corresponds to the final legislative act, Regulation (EU) 2024/1183, after agreement between Parliament and Council.¶
- Parliament takes note of the Commission statements annexed to the resolution.¶
- Parliament calls on the Commission to refer the matter to Parliament again if it replaces, substantially amends or intends to substantially amend its proposal.¶
- The Commission states that web browsers must ensure support and interoperability for qualified website authentication certificates (QWACs) solely to display the identity data of the website owner in a user-friendly manner.¶
- The Commission states that the requirement for web browsers to recognise QWACs does not restrict their own security policies or their procedures for maintaining privacy of online communications.¶
- The Commission states that the amending regulation does not allow wallet providers to process personal data from the European Digital Identity Wallet for purposes other than delivering wallet services.¶
- The Commission states that the concept of unobservability, included in Recital (11c), should prevent wallet providers from collecting and seeing details of users' day-to-day transactions.¶
- The Commission states that unobservability means there should be no correlation of data across different services for user tracking or for determining, analysing and predicting personal behaviour, interests or habits.
- The Commission states that wallet providers may access certain categories of personal data with the user's explicit consent, limited to what is necessary for each specific purpose.¶
Who is affected
- Web browsers: must support qualified website authentication certificates (QWACs) to display website owner identity data.¶
- European Digital Identity Wallet providers: may not process personal data for purposes other than delivering wallet services.¶
- Wallet users: protected from tracking and from collection of their day-to-day transaction details by wallet providers.¶
Legal basis: Article 294(2) and Article 114 of the Treaty on the Functioning of the European Union¶