EUDI-Wallet: Federal Government sticks to 2027 launch date despite headwinds

The German federal government has reaffirmed its commitment to launching the EUDI-Wallet, a state-backed digital wallet app, by January 2nd, 2027, despite criticism from experts. The app, designed to serve as a digital identity solution for citizens, will initially allow users to authenticate themselves using their electronic ID card or residence permit. It will also support storing and sharing digital documents such as driver’s licenses. Further features, including qualified electronic signatures, payment services, and access to public administrative approvals, are planned for later phases. According to the Federal Ministry of Digital Affairs and State Modernization (BMDS), the project remains on schedule and within budget. The ministry described the initiative as a structured, agile large-scale IT project that adheres to standard practices for projects of this scale. Officials emphasized that the chosen approach does not indicate a lack of direction but rather reflects established methodologies for managing complex digital infrastructure. Flexibility is key, allowing the wallet to adapt to evolving legal requirements and technical specifications from the European Union. At the EU level, certain regulatory acts and detailed specifications, such as those governing pseudonymous functions or direct communication between wallets, are still pending. Until these are finalized, a complete implementation is not possible. However, the ministry noted that major milestones have been met, including the establishment of the Common Codes GmbH as the “orchestrator” overseeing the development of the EUDI-Wallet ecosystem, the initiation of IT security assessments, and the setup of test environments. The official launch in early 2027 will provide the foundation for the app’s operation. Users will be able to access the service via smartphones, leveraging their digital ID or residence permit for online authentication. Additional functionalities, such as the storage and sharing of digital credentials like educational certificates, will follow progressively. Simultaneously, integration with the healthcare sector is advancing, with plans to use the wallet as an identification tool for the health ID starting in 2027. Full utilization as a digital insurance document during medical visits is slated for late 2028 under the draft Data and Digital Act. Data privacy is a central concern, with the wallet relying on selective data release. Users must actively consent to data requests from registered services, ensuring only necessary fields are shared. Cryptographic signatures using the Elliptic Curve Digital Signature Algorithm guarantee the integrity of documents without requiring centralized verification. Neither user data nor transaction histories will be stored centrally, according to the ministry. Security aspects will be monitored by the Federal Office for Information Security (BSI), which will provide certifications and analyses prior to launch. Once internal audits are completed, the source code will be released as open source and supplemented through a bug bounty program. To reduce dependence on U.S.-based companies like Apple and Google, the plan aims to minimize reliance on external interfaces. There will be no requirement for accounts with store operators, and the use of controversial programming interfaces such as Google's Play Integrity API will be avoided. Alternative app stores could potentially host the wallet in the medium to long term. Concerns regarding potential conflicts of interest in project management or jury selection for the Sprind competition were addressed by the ministry. All participants were subject to strict rules of recusal and transparency. The ministry listed all relevant parties and confirmed compliance with these standards.