At a meeting of the EU Council Working Party on Telecommunications held on Tuesday 25 October, Member States discussed the Czech Presidency’s compromise proposal for the future European Digital Identity Wallet (see EUROPE 13043/10).
In order to align the text with existing and future provisions in other cybersecurity texts, the compromise document proposes that Member States should notify accredited public and private bodies to certify the digital identity wallet.
The European Commission, in turn, should mandate the European Union Agency for Cybersecurity (ENISA) to undertake the development and adoption of a specific system for the cybersecurity certification of the digital identity wallet under cyber security legislation.
In the meantime, the European Cybersecurity Certification Scheme based on the Common Criteria (EUCC), published under the Cybersecurity Act, would be used as the basic methodology for portfolio certification.
Furthermore, the text proposes that the notification requirements applicable to parties who are relying on the data – in the context of the use of the digital identity wallet – should be based, in most cases, on the provision of a limited amount of information necessary for authentication. This provision, according to the Czech Presidency of the EU Council, should make it possible to automate and simplify procedures.
However, specific regimes at national or EU level may exist for categories of sensitive data or data according to certain sectoral provisions, rules or requirements. These regimes could then impose more stringent registration and authorisation requirements.
In addition, the Czech Presidency of the EU Council also took into consideration the comments of some Member States regarding fees for the use of the digital identity wallet. The text therefore specifies that “the issuance, use for authentication purposes and revocation of wallets should be free of charge for natural persons”.
However, the Presidency points out that services based on the use of the portfolio may entail costs, such as the issuing of electronic certificates of portfolio attributes.
See the document: https://aeur.eu/f/3u4 (Original Version in French by Thomas Mangin)