https://bmi.usercontent.opencode.de/eudi-wallet/wallet-development-documentation-public/latest/architecture-concept/06-mobile-devices/02-mdvm/

So, it turns out the German implementation of eIDAS (electronic ID wallet for e.g. age attestation) will require an Apple/Google account to function

Absolutely pathetic

Mobile Device Vulnerability Management Concept - German National EUDI Wallet: Architecture Documentation

If a German citizen gets sanctioned by the US government, once this is implemented (later this year), that means they will no longer be able to be a participating member of German society, e.g. to show their (digital) driver's license to traffic police
@pojntfx This scenario raises two main conflicts:
Availability and Access: The GDPR and EU principles require that access to fundamental rights not depend on third countries. Forcing a citizen to accept the terms and conditions of a private U.S. company in order to use their state-issued identity is viewed by many regulators as coercion that invalidates the “free consent” required by the GDPR. 1/2

@pojntfx Mitigation Measures in Germany and the EU 2/3

Interoperability between Member States: According to the regulation, if the German wallet fails due to a lockout, citizens should be able to legally use any other certified wallet from another EU country to identify themselves for German services.

@mjarteaga id be e interested in a list of those alternatives - and their details
@richardwonka Interoperability is at the heart of the new eIDAS 2.0 Regulation (EU 2024/1183). Its aim is to ensure that any citizen of the European Union can use their national digital wallet to identify themselves and carry out administrative procedures in any other Member State without difficulty...1/4

@richardwonka Pillars of Interoperability

Mandatory Mutual Recognition: Unlike previous regulations, where recognition was voluntary in many cases, the new framework requires all Member States to accept electronic identification means issued by other countries that meet "substantial" or "high" assurance levels. 2/4

@richardwonka Pillars of Interoperability

Architecture Reference Framework (ARF): To prevent each country from creating an incompatible system, the European Commission has established a set of common technical specifications (ARF) that all e-wallets, including the German one, must follow. 3/4

@richardwonka Pillars of Interoperability

eIDAS Nodes: These are technological infrastructures that act as “bridges” between countries. If a German citizen wishes to access a public service in Spain (such as the Tax Agency), the Spanish eIDAS node communicates with the German one to validate the identity without Spain needing direct access to Germany’s databases. 4/4

https://www.aepd.es/en/press-and-communication/blog/eidas2-the-eudi-wallet-and-the-gdpr-i#:~:text=The%20Regulation%20(EU)%202024/,relying%20on%20a%20mobile%20app.

https://didit.me/blog/eidas-2-0-levels-of-assurance-guide/

eIDAS2, the EUDI wallet and the GDPR (I) | AEPD

Photo of Dario in

AEPD