EUDI Wallet (implementing acts)
- Official title
- Commission Implementing Regulations (EU) 2024/2977, 2024/2979, 2024/2980, 2024/2981 and 2024/2982; Commission Implementing Regulation (EU) 2025/848 on the registration of wallet-relying parties, as amended by Commission Implementing Regulation (EU) 2026/1730; and Commission Implementing Regulation (EU) 2026/1731
- Reference
- (EU) 2024/2977–2024/2982, (EU) 2025/848, (EU) 2026/1730, (EU) 2026/1731
- Status
- The first five implementing acts have been in force since 24 December 2024. The relying-party registration act (2025/848, amended by 2026/1730, OJ 22-7-2026) applies from 24 December 2026. Act 2026/1731 (OJ 22-7-2026) amends four of the first ones and sets 11 August 2028 as the application date of some requirements.
- Who it reaches
- Only merchants that choose to rely on the wallet (relying parties). A merchant that does not use it has no obligations under these acts. Member State deadlines (providing the wallet) do not bind the merchant.
Dates
- : Implementing acts 2024/2977 to 2024/2982 enter into force (OJ 4-12-2024) Official source
- : Relying-party registration starts to apply (Art. 11 of 2025/848). Computed date for Art. 5a(1) eIDAS: each Member State must provide at least one wallet (24 months from 24-12-2024) Official source
- : Computed date for mandatory acceptance by Art. 5f(2) eIDAS private relying parties Official source
- : Application date set by 2026/1731 for wallets to validate relying-party registration certificates Official source
What it means for your store
- Obligation
When registering as a relying party you must provide the national register with at least the Annex I information (identification, contact, services and the data each intended use requests) and ensure it is accurate.
Art. 5(1)-(2) del Reglamento de Ejecución (UE) 2025/848 · Official source
- Obligation
If you rely on an intermediary acting on your behalf towards the wallet (for example, a platform or identity provider), your registration must say so and associate you with that intermediary.
Art. 5(1) y anexo I, puntos 14 a 16, del Reglamento de Ejecución (UE) 2025/848 (punto 16 introducido por el 2026/1730) · Official source
- Obligation
Your Member State must ensure that you provide, for each intended use, the URL of your privacy policy.
Art. 8(1) y 8(2)(g) del Reglamento de Ejecución (UE) 2025/848 (versión consolidada a 11-8-2026) · Official source
- Obligation
You must update registered information when it changes and, if you stop using the wallet for a registration, notify the registrar without undue delay and request its cancellation.
Arts. 5(3) y 6(7) del Reglamento de Ejecución (UE) 2025/848 · Official source
- Context: binds others, not you
Requesting more attributes than registered may lead the registrar to suspend or cancel your registration.
Art. 9(2)(c) del Reglamento de Ejecución (UE) 2025/848 · Official source
- Obligation
You may not retain the holder's portrait unless its processing is necessary for identification and authentication under Union data protection law, or is otherwise provided for by law.
Art. 3 bis del Reglamento de Ejecución (UE) 2024/2977, introducido por el 2026/1731 · Official source
Where to start
- Before investing, check whether your Member State already offers the wallet: the legal deadline to provide it falls on 24-12-2026 (computed date), and until then your buyers may not have one.
- Level 6: design the human-authorisation flow to request only the essential attributes (for example, over-18 instead of date of birth) and document each intended use, because that is what you will have to register.
- Level 5: if your platform or a provider performs the wallet verification for you, declare it as an intermediary in your registration.
- Level 5: do not store the portrait returned by the wallet unless you have a clear legal basis.
Related levels
Level 5: Trustworthy; Level 6: Verifiable
Verified on
All regulation