23
June
2025
Commission issues new risk management requirements under an expanded EUDI framework
On June 23, 2025, the European Commission released three new Implementing Acts for public consultation under Regulation (EU) 2024/1183, expanding the European Digital Identity Wallet (EUDI) framework established through the amended eIDAS Regulation. The proposed measures focus on strengthening the trust framework that underpins wallet interoperability and certification across Member States. Specifically, the acts address (1) updated standards for national “trusted lists” of qualified trust-service providers (TSPs); (2) harmonized accreditation procedures for conformity assessment bodies (CABs) that evaluate EUDI-related services; and (3) new risk management obligations for non-qualified trust-service providers. The consultation period remains open through July 18, 2025.
These new proposals build on the five Implementing Acts adopted in November 2024, which established the wallet’s core technical specifications, certification protocols, and data-protection safeguards. Together, they complete the operational architecture needed for Member States to issue at least one compliant EUDI Wallet by late 2026 and prepare for mandatory private-sector acceptance by 2027. The Commission’s June 2025 actions signal a move from policy development to technical enforcement, ensuring consistent supervision, interoperability, and trust across the EU’s emerging digital identity infrastructure.
Last updated 06/23/2025.
European Union (Regulatory)
History:
- Jun 23, 2025: The European Commission publishes three new draft implementing acts for public consultation under Regulation (EU) 2024/1183, detailing trust framework requirements for the European Digital Identity Wallet, including updates to trusted lists, accreditation of conformity assessment bodies, and risk management standards for non-qualified trust service providers.
- Nov 28, 2024: The European Commission formally adopts all five implementing regulations, setting the stage for EU member states to deploy at least one certified digital identity wallet by 2026.
- Sep 9, 2024: Public consultation period for the five implementing acts officially closes.
- Apr 11, 2024: EU Regulation 2024/1183 enters into force, amending Regulation (EU) No 910/2014 (eIDAS) and formally establishing the European Digital Identity Framework, and the Commission opens a public consultation on five implementing acts. Regulation (EU) 2024/1183 (EUDI Regulation).