New technical framework for the European Digital Identity Wallet (eIDAS) reveals severe shortcomings, threatening user privacy and contradicting the regulation's intent, rights group says

Submitted ⁨⁨4⁩ ⁨months⁩ ago⁩ by ⁨0x815@feddit.org⁩ to ⁨technology@lemmy.world⁩

https://epicenter.works/en/content/eidas-building-trust-or-invading-privacy

cross-posted from: feddit.org/post/317047

in February 2024, the EU Parliament adopted the eIDAS regulation, creating the framework for a “European Digital Identity Wallet”. This digital Wallet will enable citizens to identify themselves in a legally binding manner, both online and offline, sign documents, login into websites and share personal data about them with others. Recently, the European Commission published the Architectural Reference Framework (ARF) 1.4 for the technical implementation of the Wallet.

The success of the EU Digital Identity Wallet depends on its ability to gain citizens’ trust and establish a resilient infrastructure in our current data-driven economy.

“However, after our analysis, we believe that this goal has been missed,” says the digital rights group Epicenter Works.

“We see severe shortcomings in the ARF that either contradict the regulation or ignore important elements of it. These issues, if left unaddressed, could significantly undermine user rights and privacy.”

source

Comments

Sort:hotnew top

MajorHavoc@programming.dev ⁨4⁩ ⁨months⁩ ago
I can’t say I’m shocked. But I am disappointed.

source
- zweieuro@lemmy.world ⁨4⁩ ⁨months⁩ ago
  I would be very worried it this was ‘final, and now we will do it as written’ but it seems just be another iteration.the critique is great and I just hope they listen.
  
  I am not shocked, but i’dsave disappointed for when the try to do it and noone uses it because of these reasons.
  
  source
hperrin@lemmy.world ⁨4⁩ ⁨months⁩ ago
I’m not gonna trust the headline of an article with an AI image from a place called epicenter.works.

source
- 0x815@feddit.org ⁨4⁩ ⁨months⁩ ago
  Epicenter Works is a digital rights organizations based in Austria.
  
  source
  - hperrin@lemmy.world ⁨4⁩ ⁨months⁩ ago
    Yeah, I read their about page. I wouldn’t trust them as a lone voice on something, but if other groups come to the same conclusion, sure. But mostly, I don’t trust articles with AI image headers. It makes it seem like the article is written by a bot.
    
    source
    -> View More Comments
- conciselyverbose@sh.itjust.works ⁨4⁩ ⁨months⁩ ago
  I started to highlight bits to cut out and highlight as the key points, but it became pretty quickly that that link already is the executive summary. It’s already basically in outline form, and a super quick read.
  
  You don’t need to rely on the headline.
  
  source
themurphy@lemmy.ml ⁨4⁩ ⁨months⁩ ago
We have this in Denmark, and when it works, you’ll all love it.

It’s soooo easy to use, and it’s also a very secure way it’s implemented, because we have 2FA for everything important.

source
- unexposedhazard@discuss.tchncs.de ⁨4⁩ ⁨months⁩ ago
  2FA doesnt prevent the institutions, that you use it with, from collecting your data tho.
  
  source
  - themurphy@lemmy.ml ⁨4⁩ ⁨months⁩ ago
    You do. They can only collect data you allow.
    
    Are you familiar with the Danish system tho?
    
    source
    -> View More Comments