The European Digital Identity (EUDI) Wallet will enable citizens and organisations to prove their identity, authenticate, and share verified information across the European Union.
Establishing trust in this ecosystem requires more than proving that an individual wallet application works as expected. Trust must extend across the entire ecosystem. This includes the wallet solution, its security components, the wallet and Person Identification Data (PID) providers, and the processes that connect them. Each of these must meet high standards of security and resilience, including when faced with highly sophisticated attackers.
The Dutch approach
The Netherlands is therefore developing an integrated certification system in support of Regulation (EU) 2024/1183 and the European requirements for certifying EUDI Wallets. The Dutch approach builds on a common European Certification System developed in cooperation with other Member States and based on the principles of ISO/IEC 17067. This common framework is then tailored to the Dutch legal, institutional and technical context and translated into concrete certification schemes.
Covering the complete trust chain
The proposed system brings together functional and cybersecurity certification, as well as requirements for Wallet and PID providers. It covers the entire trust chain, from the issuance of PID and wallet onboarding to the secure operation of wallet solutions and their interactions with issuers and relying parties. Particular attention is paid to preventing identity theft and impersonation, as well as ensuring that the system can withstand attacks by highly capable adversaries.
Admission and supervision
A separate admission framework sets out requirements for data protection, trustworthy governance, digital sovereignty, and financial soundness, complementing the certification. Together, certification, admission and ongoing supervision aim to create a consistent, transparent and resilient trust framework.
Providing feedback on the draft documents
The draft documents will be available from 5 November on the EDI Wallet Pleio platform. They set out the principles, structure, responsibilities and different components of the proposed Dutch approach to certification. They aim to provide a basis for further cooperation and alignment among public authorities, certification bodies, conformity assessment bodies, technology providers and other stakeholders involved in the EUDI Wallet ecosystem.
A public feedback round will be open once the draft documents are published and will run until 31 December 2026. We welcome your feedback. Please submit your comments using the feedback form and email them to eudiw-certificatie-nl@minbzk.nl. If you have any questions, please send them to the same email address.
