Exhibition booth of the Federal Ministry for Digital Affairs and State Modernization at the Smart Country Convention, presenting information on BundID and the next steps toward integrating the EUDI Wallet.
Eudi-wallet.gov.de
Germany’s federal government confirmed this week it will proceed with its January 2, 2027 rollout of the EU Digital Identity Wallet, brushing aside a wave of expert criticism aired before the Bundestag and formally denying that its development process has been chaotic. The government’s written response to a parliamentary inquiry from the Greens (Bündnis 90/Die Grünen) — filed July 6 and published July 30 — described the project as a “structured, agile large-scale IT project” operating within its time and budget framework, and rejected characterizations of governance disorder as a misunderstanding of agile development methodology.
What the government did not address directly was the more specific concern: that what Germany will actually hand citizens on January 2 will be, in the words of technical experts, a Minimalkonstrukt — a stripped-down baseline build that satisfies the minimum European requirements and little else — and that the legislation meant to govern it may not be law by the time it launches.
The development comes as the EU’s flagship digital infrastructure project is on track to be met by fewer than half of its 27 member states by the December 24, 2026 deadline. Germany’s January 2 date, one week past that deadline, makes it one of a small cohort of European governments likely to launch on time or nearly on time. But critics argue that being among the fastest carries little meaning if speed is achieved by shipping a product that falls short of its own specifications.
Germany’s Digital ID Wallet: What Launches in January — and What Doesn’t
The EUDI Wallet is the product of eIDAS 2.0, Regulation (EU) 2024/1183, which entered into force on May 20, 2024, and requires all 27 EU member states to make at least one certified national wallet available to citizens by late December 2026. The wallet is designed to let EU citizens store and present official credentials — national ID cards, diplomas, driving licenses, medical records — via a smartphone app, with cross-border recognition across the EU.
Germany’s governing framework is the Digitale-Identitäten-Gesetz (DIdG), a draft bill the federal cabinet approved on May 20, 2026, and forwarded to the Bundestag for debate. The Library of Congress Global Legal Monitor confirms the legislation designates the Federal Ministry for Digital Affairs and State Modernization (BMDS) as the responsible authority. The wallet’s development sits with the BMDS, which has delegated day-to-day build-out to SPRIND, the Federal Agency for Disruptive Innovation, working in coordination with Common Codes GmbH as the ecosystem “orchestrator.”
What the January 2 wallet will do: identification and credential presentation. What it will not yet do: qualified electronic signatures, pseudonymous logins, or payment authorizations. Those capabilities are planned for 2027 and 2028. The wallet will be free and voluntary, with analog alternatives required to remain available.
The BMDS cited its Saxon pilot as evidence of on-schedule progress — residents of Dresden have been able to test loading credentials including the Dresden-Pass welfare card and the Sächsische Ehrenamtskarte volunteer certificate into a pre-production wallet environment. According to the government’s parliamentary response, SPRIND’s sandbox ran 115 organizations across 150 use cases in the six months prior to the pilot, making relying-party onboarding the program’s identified bottleneck.
The government disclosed its project budget in the same parliamentary response: €79.3 million (approximately $91 million USD) net through 2026, with a further €135 million (approximately $155 million USD) projected for operation and expansion through 2028, according to Heise Online’s reporting on the parliamentary response.
What Experts Said — and What the Government Didn’t Answer
The government’s reassurances were aimed partly at neutralizing a specific event: a technical expert hearing organized by the Left (Linke) faction in the Bundestag, where specialists raised pointed concerns that went well beyond general skepticism.
Daniel Leisegang, co-editor in chief of Netzpolitik.org, told the hearing that at launch the wallet will be far from what it is supposed to be. Leisegang specifically criticized the DIdG’s grant of expansive authority to the BMDS through delegation clauses (Verordnungsermächtigungen): central decisions about the wallet’s architecture and capabilities will be made after the law passes, not in the law itself. That structure, Leisegang argued, amplifies risks because it converts major policy decisions into ministerial exercises.
Bianca Kastl, a researcher at the Innovationsverbund Öffentliche Gesundheit, raised a more pointed concern about a specific DIdG provision: the Experimentierklausel — an experimentation clause that would authorize the BMDS to greenlight additional identity verification methods by statutory regulation, without further parliamentary approval. “Something like that is not appropriate in the area of digital identities,” Kastl said. Drawing on her experience with the digitalization of German healthcare, she warned that the same mechanism could later be used to reintroduce video-based identity verification (VideoIdent), which was phased out in other digital health contexts after concerns about security and access barriers. “If something goes wrong, there’s a problem that you can’t quickly walk back,” she told the hearing.
Other experts at the hearing flagged unresolved liability questions — who is accountable when a citizen suffers harm from a wallet failure, a data breach, or identity fraud — and raised concerns about the wallet’s post-quantum security readiness.
The broader expert consensus was that Germany would launch a Minimalkonstrukt, and that some promised capabilities — such as municipalities issuing digital disability passes — could still be years away.
What the Architecture Debate Is Really About
Underneath the political dispute is a technical controversy that the government’s parliamentary response did not engage with directly.
Germany’s EUDI Wallet, like most implementations following the EU Architecture and Reference Framework (ARF), uses a signed-data credential model: when a user presents an identity credential from their wallet, they hand over a digitally signed document to the relying party. The VZBV — Germany’s national consumer federation — commissioned an independent security analysis by Defendo IT, which found that this approach creates a technical tracking risk: relying parties who receive signed credentials can, if they collude or aggregate data, link a user’s activity across different services over time.
The German eID card already provides a model for avoiding this. Its online ID function uses a different mechanism: restricted identification through a secure channel, where the card chip proves attributes directly to a verified relying party without a signed document changing hands. No transferable credential is created. The VZBV’s position paper explicitly recommends the secure-channel approach for the EUDI Wallet, noting it is both privacy-preserving and technically mature, according to Heise Online’s reporting on the consumer protection warning.
The Experimentierklausel controversy connects directly to this architectural dispute. Critics fear the clause would let the BMDS, by statutory regulation alone, authorize additional verification methods — including ones that reintroduce the tracking risks the zero-knowledge proof and secure-channel alternatives are designed to prevent — without any parliamentary vote. Whether the DIdG’s first debate in the Bundestag this autumn will address this provision is unclear.
Germany’s Law May Not Exist When the Wallet Launches
Among the concerns critics have raised, the statutory gap is perhaps the most structurally unusual. The DIdG passed the federal cabinet in May 2026, received Bundesrat comments by July 10, and is expected to be debated in the Bundestag after the parliamentary summer recess ends in autumn 2026. After a Bundestag vote, the Bundesrat must also act; then the federal president must sign. The window between anticipated passage and the January 2, 2027 launch is narrow.
The government’s position, as stated in its parliamentary response, is that the January 2 launch does not require the DIdG to be in force — the first phase (identification and credential presentation) rests on existing legal foundations, with the DIdG supplementing those foundations once enacted. Critics have questioned the legal soundness of this sequencing and raised the open question of what legal recourse citizens and relying parties would have during any gap period.
Biometric Photo Opt-Out: A Compromise That Pleased No One
A separate controversy concerns the biometric photograph required in the wallet’s Person Identification Data (PID) credential set. The European Commission had proposed mandatory biometric storage in every wallet; following negotiations in the eIDAS committee on June 18, 2026, the outcome was that member states must include a photo but may offer citizens an opt-out from storing it.
Data protection advocates were unsatisfied. Biometric data processed to uniquely identify a person constitutes a special category of personal data under GDPR Article 9, carrying heightened protection requirements. An opt-out model that some member states will not offer creates an uneven protection landscape across the EU — exactly the kind of fragmentation eIDAS 2.0 was designed to prevent.
Most of Europe Won’t Be Ready on Time
Germany’s January 2 date is notable in part because of who it stands alongside — and who is absent from that cohort.
A January 2026 assessment by digital identity firm Signicat found that only around 12 of the EU’s 27 member states were on track to have a functioning wallet available by the end of 2026, with Germany, France, Austria, Greece, and Italy among the probable compliers. An April 2026 status review by Namirial painted a somewhat more differentiated picture — with three countries near-certain, five very likely, and eight likely — but still left a large middle band with real uncertainty around certification, onboarding completeness, and operational scope. The Netherlands signaled early that it was unlikely to meet the December deadline fully; Malta expected only partial availability; Bulgaria had reportedly not yet begun development of a state-provided wallet.
A cross-border interoperability test run by the European Commission in April 2026 found that fewer than one quarter of member states had participated with wallet-enabled applications — a signal that the actual number of countries ready on time may fall even shorter than initial projections. Relying-party onboarding — the bottleneck identified in Germany’s own sandbox — is a problem across the EU, not just in Berlin.
The Commission’s internal position acknowledges the reality: a uniform pan-European go-live was never the realistic expectation. The actual rollout will be phased, with leading countries going first and others following over months or years. The practical implication for businesses and banks that must accept the wallet by December 2027 — per the mandatory acceptance obligation for regulated sectors — is that they cannot plan for one uniform European market. Germany will have a wallet; a large share of the bloc will not.
Half of Users Have Never Heard of the Wallet That Launches in Five Months
Even as the technical and governance debate intensifies inside the Bundestag and at expert hearings, consumer research published in July 2026 by IDnow and market research firm Sapio Research found that 51 percent of surveyed consumers in France and Germany had never heard of the EUDI Wallet. The survey of 2,000 respondents across both countries found that only 20 percent had any clear understanding of a system that will reshape how hundreds of millions of people prove their identities online. Awareness improved significantly once the wallet’s privacy-preserving features were explained — 63 percent of respondents said they would be more likely to use it after learning it could, for example, verify their age without disclosing their name, date of birth, or address.
That finding underscores the structural challenge facing the project: even a technically successful January 2 launch, on a wallet the critics characterize as bare-minimum, will mean little without citizens understanding what they are being offered. Among respondents familiar with the wallet, 75 percent expressed confidence in a successful rollout; among those who had never heard of it, that figure fell to 33 percent. The government’s communications campaigns on the wallet have remained largely absent from the public conversation.
Whether what arrives on January 2 will be robust enough to build that trust — or whether it will hand critics the evidence they need to argue that the government prioritized its deadline over its citizens’ interests — will begin to become clear in five months.
Frequently Asked QuestionsWhat is the EU Digital Identity Wallet and what will Germany’s version do when it launches?
The EU Digital Identity Wallet (EUDI Wallet) is a mobile app framework defined in EU Regulation 2024/1183 (eIDAS 2.0), which requires all 27 EU member states to offer citizens a certified national wallet by late December 2026. Germany’s version is scheduled for January 2, 2027. At launch, it will support identification and credential presentation — storing and presenting your national ID card, driving license, and similar documents digitally. Qualified electronic signatures, pseudonymous logins, and payment authorizations are planned for later phases in 2027 and 2028. Use is voluntary and free, and analog alternatives must remain available.
Why are experts concerned about the DIdG’s “Experimentierklausel”?
The Experimentierklausel in Germany’s draft Digital Identities Act (DIdG) authorizes the Federal Ministry for Digital Affairs (BMDS) to approve additional identity verification methods by ministerial regulation, without requiring a further parliamentary vote. Critics, including researchers at the Innovationsverbund Öffentliche Gesundheit, warn this could allow the reintroduction of video-based identity verification (VideoIdent) — a method phased out in German healthcare digitalization over security and access concerns — without any democratic check. The deeper concern is that the clause could be used to authorize verification methods that undermine the privacy-preserving architecture that makes the wallet worth having in the first place.
Can the EUDI Wallet track which services I use?
It depends on the architecture. Germany’s expected implementation uses signed-data credentials — digitally signed documents a relying party receives when you present your wallet. Germany’s own consumer federation (VZBV) commissioned a security analysis finding that this approach creates a correlation risk: service providers who receive signed credentials can, in principle, link your activity across different services over time. The German eID card already uses a more privacy-protective method — a secure channel that proves attributes without creating a transferable signed document. The VZBV has recommended the wallet adopt this approach. Whether Germany’s baseline launch will implement stronger privacy protections than the signed-data model depends on decisions that may be made by ministerial regulation after the law passes.
What happens if Germany’s governing law (DIdG) is not enacted before the wallet launches?
The German government says the January 2, 2027 launch does not require the DIdG to be in force, because identification and credential presentation rest on existing legal foundations that the DIdG will supplement once enacted. Critics have disputed whether this sequencing is legally sound and have raised the open question of what legal recourse citizens and businesses would have during any gap between launch and enactment. The DIdG is expected to be debated in the Bundestag after summer recess ends in autumn 2026, followed by Bundesrat review and presidential signature — a tight window before the January deadline.