![\"Exhibition](\"https:\/\/www.europesays.com\/germany\/wp-content\/uploads\/2026\/08\/exhibition-booth-federal-ministry-digital-affairs-state.jpg\")
<\/p>\n<\/p>\n
Exhibition booth of the Federal Ministry for Digital Affairs and State Modernization at the Smart Country Convention, presenting information on BundID and the next steps toward integrating the EUDI Wallet.
\nEudi-wallet.gov.de<\/p>\n
Germany’s federal government confirmed this week it will proceed with its January 2, 2027 rollout of the EU Digital Identity Wallet, brushing aside a wave of expert criticism aired before the Bundestag and formally denying that its development process has been chaotic. The government’s written response to a parliamentary inquiry<\/a> from the Greens (B\u00fcndnis 90\/Die Gr\u00fcnen) \u2014 filed July 6 and published July 30 \u2014 described the project as a “structured, agile large-scale IT project” operating within its time and budget framework, and rejected characterizations of governance disorder as a misunderstanding of agile development methodology.<\/p>\n What the government did not address directly was the more specific concern: that what Germany will actually hand citizens on January 2 will be, in the words of technical experts, a Minimalkonstrukt \u2014 a stripped-down baseline build that satisfies the minimum European requirements and little else \u2014 and that the legislation meant to govern it may not be law by the time it launches.<\/p>\n The development comes as the EU’s flagship digital infrastructure project is on track to be met by fewer than half of its 27 member states by the December 24, 2026 deadline. Germany’s January 2 date, one week past that deadline, makes it one of a small cohort of European governments likely to launch on time or nearly on time. But critics argue that being among the fastest carries little meaning if speed is achieved by shipping a product that falls short of its own specifications.<\/p>\n Germany’s Digital ID Wallet: What Launches in January \u2014 and What Doesn’t<\/p>\n The EUDI Wallet is the product of eIDAS 2.0, Regulation (EU) 2024\/1183<\/a>, which entered into force on May 20, 2024, and requires all 27 EU member states to make at least one certified national wallet available to citizens by late December 2026. The wallet is designed to let EU citizens store and present official credentials \u2014 national ID cards, diplomas, driving licenses, medical records \u2014 via a smartphone app, with cross-border recognition across the EU.<\/p>\n Germany’s governing framework is the Digitale-Identit\u00e4ten-Gesetz (DIdG), a draft bill the federal cabinet approved on May 20, 2026, and forwarded to the Bundestag for debate. The Library of Congress Global Legal Monitor<\/a> confirms the legislation designates the Federal Ministry for Digital Affairs and State Modernization (BMDS) as the responsible authority. The wallet’s development sits with the BMDS, which has delegated day-to-day build-out to SPRIND, the Federal Agency for Disruptive Innovation, working in coordination with Common Codes GmbH as the ecosystem “orchestrator.”<\/p>\n What the January 2 wallet will do<\/a>: identification and credential presentation. What it will not yet do: qualified electronic signatures, pseudonymous logins, or payment authorizations. Those capabilities are planned for 2027 and 2028. The wallet will be free and voluntary, with analog alternatives required to remain available.<\/p>\n The BMDS cited its Saxon pilot as evidence of on-schedule progress \u2014 residents of Dresden have been able to test loading credentials including the Dresden-Pass welfare card and the S\u00e4chsische Ehrenamtskarte volunteer certificate into a pre-production wallet environment. According to the government’s parliamentary response, SPRIND’s sandbox ran 115 organizations across 150 use cases in the six months prior to the pilot<\/a>, making relying-party onboarding the program’s identified bottleneck.<\/p>\n The government disclosed its project budget in the same parliamentary response: \u20ac79.3 million (approximately $91 million USD) net through 2026, with a further \u20ac135 million (approximately $155 million USD) projected for operation and expansion through 2028, according to Heise Online’s reporting on the parliamentary response<\/a>.<\/p>\n What Experts Said \u2014 and What the Government Didn’t Answer<\/p>\n The government’s reassurances were aimed partly at neutralizing a specific event: a technical expert hearing organized by the Left (Linke) faction in the Bundestag, where specialists raised pointed concerns that went well beyond general skepticism.<\/p>\n Daniel Leisegang, co-editor in chief of Netzpolitik.org, told the hearing that at launch the wallet will be far from what it is supposed to be<\/a>. Leisegang specifically criticized the DIdG’s grant of expansive authority to the BMDS through delegation clauses (Verordnungserm\u00e4chtigungen): central decisions about the wallet’s architecture and capabilities will be made after the law passes, not in the law itself. That structure, Leisegang argued, amplifies risks because it converts major policy decisions into ministerial exercises.<\/p>\n Bianca Kastl, a researcher at the Innovationsverbund \u00d6ffentliche Gesundheit, raised a more pointed concern about a specific DIdG provision: the Experimentierklausel \u2014 an experimentation clause that would authorize the BMDS to greenlight additional identity verification methods by statutory regulation, without further parliamentary approval. “Something like that is not appropriate in the area of digital identities,”<\/a> Kastl said. Drawing on her experience with the digitalization of German healthcare, she warned that the same mechanism could later be used to reintroduce video-based identity verification (VideoIdent), which was phased out in other digital health contexts after concerns about security and access barriers. “If something goes wrong, there’s a problem that you can’t quickly walk back,” she told the hearing.<\/p>\n Other experts at the hearing flagged unresolved liability questions \u2014 who is accountable when a citizen suffers harm from a wallet failure, a data breach, or identity fraud \u2014 and raised concerns about the wallet’s post-quantum security readiness<\/a>.<\/p>\n The broader expert consensus was that Germany would launch a Minimalkonstrukt, and that some promised capabilities \u2014 such as municipalities issuing digital disability passes \u2014 could still be years away<\/a>.<\/p>\n What the Architecture Debate Is Really About<\/p>\n Underneath the political dispute is a technical controversy that the government’s parliamentary response did not engage with directly.<\/p>\n Germany’s EUDI Wallet, like most implementations following the EU Architecture and Reference Framework (ARF), uses a signed-data credential model: when a user presents an identity credential from their wallet, they hand over a digitally signed document to the relying party. The VZBV \u2014 Germany’s national consumer federation \u2014 commissioned an independent security analysis by Defendo IT<\/a>, which found that this approach creates a technical tracking risk: relying parties who receive signed credentials can, if they collude or aggregate data, link a user’s activity across different services over time.<\/p>\n The German eID card already provides a model for avoiding this. Its online ID function uses a different mechanism: restricted identification through a secure channel, where the card chip proves attributes directly to a verified relying party without a signed document changing hands. No transferable credential is created. The VZBV’s position paper<\/a> explicitly recommends the secure-channel approach for the EUDI Wallet, noting it is both privacy-preserving and technically mature, according to Heise Online’s reporting on the consumer protection warning<\/a>.<\/p>\n The Experimentierklausel controversy connects directly to this architectural dispute. Critics fear the clause would let the BMDS, by statutory regulation alone, authorize additional verification methods \u2014 including ones that reintroduce the tracking risks the zero-knowledge proof and secure-channel alternatives are designed to prevent \u2014 without any parliamentary vote. Whether the DIdG’s first debate in the Bundestag this autumn will address this provision is unclear.<\/p>\n Germany’s Law May Not Exist When the Wallet Launches<\/p>\n Among the concerns critics have raised, the statutory gap is perhaps the most structurally unusual. The DIdG passed the federal cabinet in May 2026, received Bundesrat comments by July 10, and is expected to be debated in the Bundestag after the parliamentary summer recess ends in autumn 2026. After a Bundestag vote, the Bundesrat must also act; then the federal president must sign. The window between anticipated passage and the January 2, 2027 launch is narrow.<\/p>\n The government’s position, as stated in its parliamentary response<\/a>, is that the January 2 launch does not require the DIdG to be in force \u2014 the first phase (identification and credential presentation) rests on existing legal foundations, with the DIdG supplementing those foundations once enacted. Critics have questioned the legal soundness of this sequencing and raised the open question of what legal recourse citizens and relying parties would have during any gap period.<\/p>\n Biometric Photo Opt-Out: A Compromise That Pleased No One<\/p>\n A separate controversy concerns the biometric photograph required in the wallet’s Person Identification Data (PID) credential set. The European Commission had proposed mandatory biometric storage in every wallet; following negotiations in the eIDAS committee on June 18, 2026, the outcome<\/a> was that member states must include a photo but may offer citizens an opt-out from storing it.<\/p>\n Data protection advocates were unsatisfied. Biometric data processed to uniquely identify a person constitutes a special category of personal data under GDPR Article 9<\/a>, carrying heightened protection requirements. An opt-out model that some member states will not offer creates an uneven protection landscape across the EU \u2014 exactly the kind of fragmentation eIDAS 2.0 was designed to prevent.<\/p>\n Most of Europe Won’t Be Ready on Time<\/p>\n Germany’s January 2 date is notable in part because of who it stands alongside \u2014 and who is absent from that cohort.<\/p>\n A January 2026 assessment by digital identity firm Signicat found that only around 12 of the EU’s 27 member states were on track to have a functioning wallet available by the end of 2026, with Germany, France, Austria, Greece, and Italy among the probable compliers. An April 2026 status review by Namirial<\/a> painted a somewhat more differentiated picture \u2014 with three countries near-certain, five very likely, and eight likely \u2014 but still left a large middle band with real uncertainty around certification, onboarding completeness, and operational scope. The Netherlands signaled early that it was unlikely to meet the December deadline fully; Malta expected only partial availability; Bulgaria had reportedly not yet begun development of a state-provided wallet.<\/p>\n