— 8 min read
Where the EU’s Christmas Eve digital ID deadline comes from
I went looking for the sentence in EU law that makes digital identity wallets due on 24 December 2026 and couldn't find it. Here's where that date comes from, what the wallet is meant to be, and how close anyone seems to be.
I went looking for the sentence in EU law that says every member state has to offer people a digital identity wallet by 24 December 2026. It had to be in Article 5a of the eIDAS Regulation, surely. What Article 5a(1) actually says is that each country must provide at least one wallet “within 24 months of the date of entry into force of the implementing acts”. There’s no date in it at all. Christmas Eve is a sum somebody had to do.
So I did the sum. The acts in question are five Commission regulations dated 28 November 2024, published in the Official Journal on 4 December 2024, and each enters into force on the twentieth day after publication. That makes 24 December 2024, and 24 months on is 24 December 2026, by my count. The Commission’s own policy page just says “by the end of 2026”. A report on a testing event the Commission ran in Brussels in December 2025 refers to “the November 2026 EUDIW deadline” (EUDIW being the official shorthand for the wallet), a month that appears nowhere in the arithmetic. My guess is that November comes from the Regulation’s instruction to adopt those acts by 21 November 2024, which the Commission missed by a week.
What follows is what I got from reading the Regulation and the Commission’s own papers: what this wallet is meant to be, who the date binds, and how close anyone seemed to be as of early November 2026.
What the law says you’d get
The law is Regulation (EU) No 910/2014, known as eIDAS, on electronic identification and trust services. A 2024 amendment, Regulation (EU) 2024/1183, in force since 20 May 2024, is what added the wallet. The definition in Article 3 is exactly as warm as you’d expect: “an electronic identification means which allows the user to securely store, manage and validate person identification data and electronic attestations of attributes”, so that you can hand them to whoever is asking, and sign documents besides.
In everyday language it is an app, and ENISA, the EU’s cybersecurity agency, notes that most implementations are designed to run on mobile personal devices. It holds a verified version of who you are, plus other attested facts about you. The Commission’s examples are mobile driving licences and education credentials. Article 5a then lists what it has to do, and these lines stood out for me:
- Issuing it, using it and revoking it are free of charge for individuals.
- Using it is voluntary. People who don’t must not be “restricted or made disadvantageous” in reaching public or private services, and other ways of identifying yourself have to stay available.
- Everyone gets qualified electronic signatures free of charge by default, the kind with “the equivalent legal effect of a handwritten signature”. A country may limit the free version to non-professional use.
- The app’s source code has to be open source, though a country may hold back parts that aren’t installed on your device, for duly justified reasons.
- A dashboard keeps a log of every transaction, and from it you can ask a company to erase your data or report it to your data protection authority.
The voluntary clause is blunter than I expected from an EU text. A government app you can ignore without penalty would be a nice thing to have in writing, and here it is in writing.
The plastic card test
What made the privacy promises concrete for me was an old-fashioned plastic ID card, because any digital replacement ought to do at least as well as one of those. It shows everything printed on it to whoever you hand it to, and you can’t fold half of it away. On that score the wallet is supposed to do better: Article 5a(4) requires that “selective disclosure of data is possible”, meaning you show the piece a shop or website needs and keep back the rest.
A plastic card also doesn’t ring the town hall each time someone looks at it. An app easily could, and the drafters clearly thought about that. Wallets must “not provide any information to trust service providers of electronic attestations of attributes about the use of those electronic attestations”, which means whoever issued, say, a diploma in your wallet isn’t told where you’ve shown it. On top of that, the technical framework must not let those issuers “or any other party” obtain data that would let them track or correlate what you do, unless you’ve explicitly agreed.
All of that is a requirement on paper, and nobody has yet shown me the finished thing. A rule saying a system must not track you only goes so far, which is why it gets the next post.
Who the date actually binds
Putting Article 5a(1) and the acceptance rules in Article 5f side by side was useful, because they don’t all work the same way.
| Who | What they must do | Date in the text |
|---|---|---|
| Each member state | Provide at least one wallet | None: 24 months from 24 December 2024, so 24 December 2026 by my count |
| Member states, for public bodies’ online services that require identification | Accept wallets as well | None |
| Private firms that law or a contract obliges to use strong login, except micro and small enterprises | Accept wallets when the user asks | None: 36 months from 24 December 2024, so 24 December 2027 by my count |
| Very large online platforms that require a login | Accept wallets when the user asks, for the minimum data needed | None |
“Strong login” is my shorthand for what the law calls strong user authentication: at least two independent factors of different kinds, such as a password plus something only you hold. The article’s list of sectors runs from banking and energy to health and telecoms, and because it says “including”, the list isn’t closed. Who can actually refuse you is a post of its own later, since a contract can create the duty as well as a law can.
Two rows have no number at all. For public services the Commission’s explainer says acceptance becomes mandatory “when they are issued by Member States at the end of 2026”, which seems a fair reading, though it is still a reading. For the big platforms, any date you see is somebody’s interpretation, as far as I can tell.
Why they bothered
The 2014 version of eIDAS gave Europe a common basis for electronic identification across borders, and the Commission is candid about what it left out. In its own Q&A it says the law “does not contain any obligation for Member States to provide their citizens and businesses with a digital identification system”, and that it had nothing to say about private services or mobile devices. The amending regulation’s recitals complain of “the use of divergent national solutions or, in some Member States, the absence of such electronic identification solutions”.
You can see the divergence in the numbers. On 2025 data in the Commission’s State of the Digital Decade report for 2026, 52% of people aged 16 to 74 in the EU said they had used an electronic ID for private online services in the previous 12 months. Denmark is at 99%, Germany at 15%, Bulgaria at 12%. I live in Germany, so the 15% is the figure that got my attention. A wallet here starts from a very different place than one in Copenhagen.
How close anyone is, as of early November 2026
What I could find is patchy, and most of it isn’t recent. That same Digital Decade report, adopted on 17 June 2026, says “All Member States are actively developing their European Digital Identity Wallets” and recommends that they make sure of issuance “by the December 2026 deadline”. It doesn’t name a single wallet that is live.
Less diplomatic is that testing event of December 2025. Eleven member states brought wallet applications, roughly half of them using the project’s reference implementation for the tests. Across all 27 the report concluded that “fewer than one quarter of Member States participated with EUDI Wallet enabled applications” and that “it is likely that only a few Member States will meet the November 2026 EUDIW deadline”. Fair warning: that was a snapshot from a year before the date, and the report says itself that its readiness observations cover only the countries that came.
ENISA’s draft certification scheme, published for public review in March 2026, is the bluntest line I found: “In early 2026, no EUDI Wallet has been deployed or certified, and the specification remains work in progress.” Certification isn’t a side issue. The Regulation wants wallets certified by bodies the member states designate, and the Commission has to publish the list of certified ones in the Official Journal. I searched the EU Publications Office records on 9 November 2026 for documents with certified wallets in the title and found only the 2025 regulation on how countries submit the information, with no list.
National news is thin. The German federal government said on 15 October 2026 that its wallet, called d-you, starts in early January 2027 with 40 partners, which would fall after Christmas Eve on anyone’s arithmetic. Denmark’s digital agency released an app called AltID on 3 June 2026 with an age proof and an ID card. Its announcement doesn’t call that an EU digital identity wallet, so I won’t either.
What I still don’t know is what happens to a country that misses the date. I didn’t find an official answer.
The promise I want to test
Next I want to take that second card comparison seriously and ask what the wallet, its maker or the issuing country could really learn about where you’ve used it, and what the people who’ve looked hardest at the design say about it.
Sources
Read at the source, every one of them checked in November 2026:
- EUR-Lex: Regulation (EU) 2024/1183 establishing the European Digital Identity Framework (11 April 2024)
- EUR-Lex: Regulation (EU) No 910/2014 (eIDAS), consolidated text of 18 October 2024
- EUR-Lex: Implementing Regulation (EU) 2024/2977, 2024/2979, 2024/2980, 2024/2981 and 2024/2982 (28 November 2024)
- European Commission: European Digital Identity (EUDI) Regulation (last updated 6 November 2026)
- European Commission: European Digital Identity Wallet, fact page (last updated 30 July 2024)
- European Commission: Q&A Digital Identity (last updated 4 April 2024)
- European Commission: The legal and technical road to EU Digital Identity Wallets (last updated 2 February 2026)
- European Commission: State of the Digital Decade 2026, Annex 1, COM(2026) 288 final/2 (adopted 17 June 2026, corrigendum 3 November 2026), via the Council register
- European Commission: EUDI Wallets Launchpad event report (event of 10-12 December 2025)
- ENISA: EUDIW Cybersecurity Certification, draft candidate scheme v0.4.614 (March 2026, draft for public review)
- German Federal Government: Die digitale Brieftasche kommt (15 October 2026)
- Danish Agency for Digital Government: Nu kan du downloade AltID (3 June 2026)