ENISA to Establish Cybersecurity Certification Program for EU Digital Wallet

The European Union Agency for Cybersecurity (ENISA) has been tasked by the European Commission to help develop a certification process for the EU Digital Identity Wallets (EUDI), an initiative aimed at allowing individuals to store and use personal identification data digitally across the EU. In essence, this means that ENISA will create and oversee a cybersecurity certification scheme to ensure that these digital wallets are secure, protect user privacy, and can be trusted for use in both national and cross-border contexts.

The certification process will guarantee that the EUDI Wallets meet strict security standards and can safely handle sensitive personal information like identification documents, medical records, or financial credentials. Certification will also ensure that the digital wallets are interoperable across EU member states, meaning that a wallet issued in one country can be used securely in another. The ultimate goal is to provide EU citizens with a reliable, standardized digital identification solution for accessing services online and in person throughout the continent.

Christiane Kirketerp de Viron, Acting Director for Digital Society, Trust, and Cybersecurity at the European Commission, emphasized the importance of certification for the success of the EUDI Wallets, saying it is “key for a successful functioning of the Wallets concept.”

ENISA’s role in this process will be critical, according to the agency’s Executive Director, Juhan Lepassaar. “By developing the European cybersecurity certification scheme for the European Digital Wallet (EUDIW), ENISA will support the Commission and the Member States to set out cybersecurity controls in the digital identification field allowing its timely uptake across the EU,” he said.

ENISA’s work will focus on two main areas: first, supporting the development of national certification schemes for digital wallets across EU Member States, ensuring a consistent approach; and second, launching the preparation of a European cybersecurity certification scheme for the EUDI Wallets and related electronic identification (eID) schemes. These efforts will be carried out in coordination with EU Member States, cybersecurity stakeholders, and relevant working groups.

Lepassaar emphasized the long-term impact of this effort on the EU’s digital landscape, stating, “Digital Wallets contribute to the maturity of EU’s digitalization and enhance citizens’ cybersecurity and privacy.”

The European Union’s Digital Identity Regulation came into effect in May of this year, officially establishing a legal framework for digital identities across the bloc, and paving the way for the rollout of the planned EUDI Wallets, which are expected to become available by 2026.

Source: ENISA

–

September 25, 2024 – by Cass Kennedy