ENISA Opens Public Review of Draft EUDI Wallet Certification Scheme

ENISA has opened public review of its draft candidate cybersecurity certification scheme for EUDI Wallets, moving the EU’s wallet program from preparatory working-group work into a formal feedback stage. ENISA says stakeholders can now comment on the proposed scheme through a dedicated EU Survey.

The draft is part of ENISA’s support work under the Cybersecurity Act after the European Commission asked the agency in May 2024 to prepare a candidate European cybersecurity certification scheme for EUDI Wallets. ENISA says the package covers the draft candidate scheme itself and an early draft of wallet-related service provider security requirements, intended to gather feedback on both the structure of the scheme and the approach to annexes and supporting requirements.

The current review window runs through Thursday 30 April 2026, and ENISA says it will hold an informational webinar on Wednesday 8 April from 15:00 to 16:30 CEST. The files section shows the main draft was posted 2 April 2026 as a 1.19 MB PDF. The publication page says the review is meant to validate the principles and general organization of the scheme and collect comments on the draft’s proposed elements.

That is a significant step because certification questions have moved from policy design into implementation detail. Wallet providers, component makers, trust-service operators and conformity-assessment bodies now have a concrete document set that starts to define how evaluation, assurance and governance could work once the ecosystem moves into large-scale deployment.

The certification work sits inside a broader European wallet build-out. In 2024 ENISA established the cybersecurity certification program for the EU digital wallet, and countries such as Ukraine have adopted EU-compatible digital ID wallet frameworks as implementation work moves closer to live deployment. Standards groups have also been shaping the technical base beneath the wallet stack.

The consultation moves the wallet effort further into questions of assurance, assessment and scheme governance. For wallet providers, component vendors and conformity bodies, the next few weeks are the period in which they can still influence how the certification model is structured before it advances deeper into the EU process.

Sources: ENISA Certification Portal, ENISA Certification Portal

–

By Ji-seo Kim