Experts Warn of Security Risks and Privacy Concerns in Germany's State-Issued Digital Wallet

• Experts have raised significant concerns regarding the upcoming German state-issued digital wallet, 'd-you', citing critical security and privacy flaws ahead of its January 2, 2027, launch.
• The current architecture lacks essential privacy features such as pseudonymous logins, zero-knowledge proofs, and selective data disclosure, forcing users to rely on real-name identification.
• Critics argue that the system shifts the burden of data protection onto citizens, potentially leading to excessive data collection by private companies and state entities.

Key Security and Privacy Issues

• Lack of Data Minimalism: Without safeguards to limit data requests, the wallet facilitates broad identity tracking and commercial profiling.
• Cryptographically Signed Risks: Data within the wallet is digitally signed, making it a valuable target for data brokers and identity thieves; experts argue these signed records 'follow citizens for a lifetime.'
• Centralized Failure Points: The use of cloud-based hardware security modules creates a single point of failure that conflicts with security-by-design principles.
• Creeping Mandatory Use: Experts warn that the wallet could gradually become a de facto requirement for accessing public services and workplace IT systems, mirroring patterns seen in other nations like India.

Recommendations for Improvement

• Strict Provider Vetting: Implement risk-based registration for services, ensuring that organizations only request data strictly necessary for their specific legal requirements.
• Independent Oversight: Establish an anonymous, user-friendly reporting mechanism for data misuse, coupled with strict penalties such as expulsion from the wallet ecosystem for non-compliant service providers.
• Privacy-First Defaults: Require the use of pseudonyms as the default state, and allow users to opt out of uploading biometric images unless legally necessary.
• Phased Implementation: Propose a transition period where the wallet is used only for essential identity verification until full privacy-preserving features, such as data dashboards and deletion protocols, are fully operational.