German Parliament Passes Law for Digital Identity Wallet

• The German Bundestag has passed the Digital Identity Act, establishing the legal framework for the "d-you" digital wallet scheduled to launch on January 2, 2027.
• The application will initially support only digital ID functions, with features like driver's licenses and biometric photos to be added gradually.
• Users are granted an opt-out for including biometric photos, though critics argue this fails to prevent potential discrimination against those who opt out.

Data Privacy and Implementation Concerns

• Experts criticize the absence of pseudonymization features at launch, despite them being part of the underlying eIDAS regulation.
• Pseudonym support is currently relegated to a non-binding resolution with no specific timeline, leaving it as a mere statement of intent.
• Privacy advocates warn of a "cookie banner 2.0" scenario where users might inadvertently share sensitive government-signed data with companies without proper oversight.

Oversight and Ministerial Authority

• The legislation does not mandate pre-registration audits for service providers, relying instead on companies to self-enforce data minimization principles.
• An "experimentation clause" allows the Federal Ministry for Digital Affairs significant leeway to test new features without requiring parliamentary approval.
• As the launch date approaches, concerns remain regarding whether local and municipal authorities will be sufficiently prepared to accept the new digital credentials.