This regulation (EU) 2025/849 defines how EU Member States must register and communicate metadata about each officially notified EUDI Wallet to:
The European Commission
The Cooperation Group under the eIDAS 2.0 framework
The regulation ensures technical consistency, interoperability, and public verifiability of wallet registration across the EU.
Each Member State must prepare and submit a machine-readable dataset that includes:
Wallet identifier (e.g., UUID or other persistent ID)
Country code
Legal issuer (organization issuing the wallet)
Issuance date / Validity period
Status of the wallet (e.g., active, revoked)
Compliance details:
Reference to technical specifications used (e.g., eIDAS-compliant modules)
Security assurances (certification paths, conformance to ETSI/ISO/W3C standards)
The dataset must be provided in a machine-readable format: likely JSON, XML, or a defined structured schema (e.g., based on CEF Building Blocks).
It must comply with a standard data model (to be maintained by the Commission), likely part of the broader EUDI Wallet Registry schema.
Example (conceptual JSON structure):
{
"wallet_id": "urn:eu:wallet:abc123",
"issuer": "DigitalID Authority of CountryX",
"country": "X",
"status": "active",
"valid_from": "2025-10-01",
"standards": ["ETSI TS 119 461", "W3C Verifiable Credentials"],
"signature": "<digital signature>"
}
Wallet data must be transmitted to the Commission:
Upon initial notification
Any time a wallet is updated, suspended, or revoked
The information must be sent without undue delay, ensuring real-time registry integrity
The European Commission will maintain a central machine-readable list of all notified EUDI Wallets
This list will be:
Publicly accessible
Regularly updated
Published in the Official Journal of the EU and stored in structured, queryable formats
Submissions are expected to be digitally signed to ensure authenticity and integrity
Trust frameworks like PKI, Qualified Certificates, and/or EU Trust Lists (LOTL/TL) may be required to validate sources
The Regulation explicitly refers to and relies on the following legal instruments:
Regulation (EU) No 910/2014 (eIDAS), which establishes the European Digital Identity Framework and provides the legal basis for European Digital Identity Wallets and their certification.
Article 5d(7) of Regulation (EU) No 910/2014, which empowers the Commission to set rules for compiling and maintaining the list of certified European Digital Identity Wallets.
Regulation (EU) 2016/679 (GDPR) and, where applicable, Directive 2002/58/EC, which apply to all personal data processing activities under this Regulation, including information submitted by Member States about certified wallets.