EU Digital ID Wallets Face Privacy Concerns Over Tracking Risks
Millions of European Union citizens are soon to receive access to digital identity wallets, which are designed to securely store personal information such as bank details, diplomas, and government IDs. However, cryptographers are raising concerns that the current technology may not adequately prevent user tracking across different services. The EU's digital identity regulation, passed in 2024, mandates selective disclosure, allowing users to share only necessary attributes. Despite this, when an ID is scanned, it leaves behind cryptographic signatures and identifiers that could potentially be used to link interactions across various services, enabling tracking. Experts like Anna Lysyanskaya, a professor of computer science at Brown University, and Johannes Schönrich, director at the FIM Research Center for Information Management, highlight that this residual information could allow different service providers to identify if they have interacted with the same individual, thus compromising user unlinkability...