Changes from plenary report to adopted text

Removed‘Article 6a

RemovedEuropean Digital Identity Wallets

Removed1. For the purpose of ensuring that all natural and legal persons in the Union have secure, reliable, trusted and seamless access to cross-border public and private services, while having full control over their data, each Member State shall issue at least one European Digital Identity Wallet by ... [18 months after the date of entry into force of this amending Regulation].

Removed2. European Digital Identity Wallets shall be issued and managed in any of the following ways:

Removed(a) directly by a Member State;

Removed(b) under a mandate from a Member State;

Removed(c) independently from a Member State but recognised by that Member State.

Removed2a. The source code used for providing European Digital Identity Wallets shall be open source and shall be published for auditing and review.

Removed3. European Digital Identity Wallets shall, in a user-friendly manner, enable the user to:

Removed(a) securely request and obtain, store, select, combine and share, in a manner that is transparent to, traceable by and under the sole control of the user, the necessary ▌ identification data to identify and authenticate the user online and offline in order to use online public and private services;

Removed(aa) securely store, select, combine and share electronic attestation of attributes;

Removed(ab) securely issue and revoke electronic attestation of attributes issued directly by the user;

Removed(ac) generate pseudonyms and store them encrypted and locally within it;

Removed(ad) securely authenticate a third person’s European Digital Identity Wallets or a connecting relying party, and receive and authenticate in a transparent and traceable manner the third party identity data and electronic attestation of attributes online and offline;

Removed(ae) access a data base of all transactions carried out through the European Digital Identity Wallet via a common dashboard enabling the user to:

Removed(i) view an up to date list of relying parties with whom the user has established a connection and where applicable all data shared;

Removed(ii) easily request to a relying party the deletion of personal data pursuant to Article 17 of the Regulation (EU) 2016/679);

Removed(iii) easily report to the competent national authority where a relying party is established if an unlawful or inappropriate request of data is received without leaving the European Digital Identity Wallet;

Removed(iv) revoke any electronic attestation of attribute issued by the user;

Removed(b) sign by means of qualified electronic signatures;

Removed(ba) download all users’ data, electronic attestation of attributes and configurations;

Removed(bb) exercise users’ rights of data portability by switching to another European Digital Identity Wallet belonging to the same user.

Removed4. European Digital Identity Wallets shall, in particular:

Removed(a) provide ▌ common protocols and interfaces:

Removed(i) to securely interact with the electronic identification means associated pursuant to Article 7(2), for the purpose of identifying and authenticating the user;

Removed(ii) for issuers of electronic attestation of attributes to issue electronic attestation of attributes into the user’s European Digital Identity Wallet;

Removed(iii) to establish unique, private and secure peer-to peer connections between two European Digital Identity Wallets or between an European Digital Identity Wallet and a relying party;

Removed(iv) for users of European Digital Identity Wallets and relying parties to request, receive, select, send, authenticate and validate electronic attestations of attributes, person identification data, the identification of relying parties, electronic signatures and electronic seals;

Removed(v) for users of European Digital Identity Wallets and relying parties to authenticate and validate the European Digital Identity Wallet and approved relying parties;

Removed(vi) for users of European Digital Identity Wallets or relying parties, when available, to perform a zero knowledge proof inferred from person identification data or electronic attestation of attributes;

Removed(vii) for users of European Digital Identity Wallets to transfer and request reissuance of their own electronic attestation of attributes and configurations to another European Digital Identity Wallet belonging to the same user or a device controlled by the same user;

Removed(b) ensure that ▌providers of qualified and non-qualified electronic attestations of attributes are technologically prevented from receiving any information about the use of these attributes;

Removed(c) meet the requirements set out in Article 8 with regards to assurance level “high”, in particular as applied to the requirements for identity proofing and verification, and electronic identification means management and authentication;

Removed(ca) in the case of electronic attestation of attributes with embedded disclosure policies, provide a mechanism to ensure that only the relying party or the user of European Digital Identity Wallets having the necessary electronic attestation of attribute has permission to access it;

Removed(cb) provide a mechanism to record digital requests received and digital transactions in a cryptographic manner that ensures that it is not possible to repudiate their authenticity;

Removed(cc) provide a mechanism to inform users, without delay, of any security breach that may have entirely or partially compromised their European Digital Identity Wallet or its content and in particular if their European Digital Identity Wallet has been suspended or revoked pursuant to Article 10a.

Removed▌

Removed(e) ensure that the person identification data referred to in Article 12(4), point (d), representing the natural or legal person is associated with it.

Removed(ea) provide a mechanism allowing the user of the European Digital Identity Wallet to act on behalf of another natural or legal person;

Removed(eb) display an "EU Digital Identity Wallet Trust Mark" for the recognition of qualified electronic attestation of attributes;

Removed(ec) offer qualified electronic signatures to all users by default and free of charge.’;

Removed5. Member States shall provide free of charge validation mechanisms to:

Removed(a) ▌ ensure that the authenticity and validity of European Digital Identity Wallets can be verified;

Removed(b) ▌ allow relying parties and users of European Digital Identity Wallets to verify that the electronic attestations of attributes are authentic and valid;

Removed(c) ▌ allow relying parties, users of European Digital Identity Wallets and qualified trust service providers to verify the authenticity and validity of attributed person identification data;

Removed(ca) allow European Digital Identity Wallet users to verify the authenticity and validity of the identity of relying parties approved in accordance with Article 6b(1).

Removed5a. Member States shall provide means to revoke the validity of the European Digital Identity Wallet:

Removed(a) upon the explicit request of the user;

Removed(b) when its security has been compromised;

Removed(c) upon the death of the user or cease of activity of the legal person.

Removed5b. Member States shall raise awareness about the benefits and risks of the European Digital Identity Wallet by means of communication campaigns. They shall ensure that their citizens are well-trained in its use.

Removed5c. Issuers of European Digital Identity Wallets shall ensure that users can easily request technical support and report technical problems or any other incidents having a negative impact on the provision of services of the European Digital Identity Wallet.

Removed6. ▌ European Digital Identity Wallets shall be issued under a notified electronic identification scheme of level of assurance ‘high’. ▌

Removed6a. European Digital Identity Wallets shall ensure security-by-design. European Digital Identity Wallets shall provide the necessary state-of-the-art security functionalities, such us mechanisms to encrypt and store data in a way that is only accessible to and decryptable by the user and establish end-to-end encrypted exchanges with relying parties and other European Digital Identity Wallets. They shall offer resistance to skilled attackers, ensure the confidentiality, integrity and availability of their content, including person identification data and electronic attestation of attributes and request the secure, explicit and active user’s confirmation of its operation.

Removed6b. The issuance and use of the European Digital Identity Wallets shall be free of charge to all natural and legal persons.

Removed7. The technical framework for the European Digital Identity Wallet shall be subject to the following principles:

Removed(a) the user shall be in full control of the European Digital Identity Wallet and the user’s data, including self-certification;

Removed(b) the European Digital Identity Wallet shall use decentralised elements for the identity architecture;

Removed(c) the set of electronic identification means, attributes and certificates contained in a European Digital Identity Wallet shall be stored securely and exclusively on devices controlled by the user, unless the user freely consents to storage on third-party devices or to a cloud based option;

Removed(e) the European Digital Identity Wallet shall allow secure connections between the user and the relying parties;