eIDAS 2.0
European Digital Identity Framework Regulation (Regulation (EU) 2024/1183)
eIDAS 2.0 establishes the European Digital Identity Framework, centered on the EU Digital Identity Wallet (EUDI Wallet) that lets citizens, residents, and businesses identify themselves and share verified attributes across the EU. It entered into force on 20 May 2024. The first implementing acts entered into force on 24 December 2024, which sets the deadline for every Member State to offer at least one wallet at 24 December 2026, with private relying parties that require strong user authentication and very large online platforms due to accept the wallet within 36 months of those acts (around December 2027).
Who it applies to
EU Member States, which must issue compliant wallets, and relying parties such as large online platforms and regulated services that must accept the wallet. Trust service providers and public and private services relying on electronic identification are in scope.
Identity requirements
- Member States must provide at least one EU Digital Identity Wallet to citizens, residents, and businesses
- Wallets must let users store and selectively disclose verified identity attributes and electronic attestations
- Designated relying parties (including very large online platforms) must accept the wallet for authentication
- Support qualified electronic signatures and high assurance level electronic identification
- Ensure user control, data minimization, and selective disclosure of identity attributes
- Comply with Commission implementing acts defining technical and operational specifications
How it impacts identity systems
| Identity area | Impact |
|---|---|
| Identity verification (KYC/proofing) | Provides a high-assurance, EU-wide means of identity proofing via verified wallet attributes and attestations. |
| Authentication & MFA | Enables strong, high assurance level authentication and qualified signatures across borders. |
| Customer identity & consent (CIAM) | Shifts control to users through selective disclosure and consent-based sharing of identity attributes. |
| Identity governance (IGA) | Standardizes trusted attribute attestation and acceptance obligations for relying parties across the EU. |
Upcoming deadlines
- December 24, 2026 eIDAS 2: attributes from public authentic sources must be verifiable by trust service providers
- December 24, 2026 EU Digital Identity Wallet: every Member State must offer at least one wallet
- December 24, 2027 EU Digital Identity Wallet: regulated private relying parties and very large online platforms must accept the wallet
Penalties
Penalties are set by each Member State and must be effective, proportionate and dissuasive. For qualified and non-qualified trust service providers, national maximum fines must be at least 5 million euros or, for a legal person, at least 5 million euros or 1 percent of total worldwide annual turnover, whichever is higher.
Status and dates last verified against primary sources on 2026-10-31.
eIDAS 2.0: frequently asked questions
- What is the EU Digital Identity Wallet?
- It is a secure app, provided under eIDAS 2.0, that lets EU citizens, residents, and businesses store and selectively share verified identity data and electronic attestations across the EU.
- When must Member States provide a wallet?
- Each Member State must provide at least one compliant wallet within 24 months of the entry into force of the first implementing acts. Those acts entered into force on 24 December 2024, so the deadline is 24 December 2026. Readiness varies widely between countries.
- Who must accept the EU Digital Identity Wallet?
- Public services and designated private relying parties, including very large online platforms, must accept the wallet for user authentication where strong user identification is required.
- When must private companies accept the EUDI Wallet?
- Private relying parties that are required by law or contract to use strong user authentication, and very large online platforms, must accept the wallet at the user's request within 36 months of the implementing acts entering into force, which points to around December 2027.