January 2021 Overview of Member States’ eID strategies CEF eID SMO Version 3.0 This study was carried out for the European Commission by Deloitte. Authors: Massimo Pedroli, George O’Neill, Arianna Fravolini, Leonardo Marcon Picture on the first page from Flaticon CONTENT Introduction .............................................................................................. 6 Overview of national eID strategies and legal framework ......................... 7 eID Strategy Formalisation .............................................................................. 7 Common Strategic Objectives among EU Countries ..................................... 10 Legal requirements to hold eID ..................................................................... 20 Security of eID Means .................................................................................... 22 Ecosystems overview: service providers and accessible services ............ 23 The Role of the State ..................................................................................... 23 Accessible Digital Services ............................................................................. 25 Country Overview ................................................................................... 27 Austria ............................................................................................................ 28 Belgium .......................................................................................................... 30 Bulgaria .......................................................................................................... 32 Croatia ............................................................................................................ 33 Cyprus ............................................................................................................ 35 Czech Republic ............................................................................................... 37 Denmark ........................................................................................................ 39 Estonia ........................................................................................................... 42 Finland ........................................................................................................... 47 France ............................................................................................................ 50 Germany ........................................................................................................ 52 Greece ............................................................................................................ 55 Hungary .......................................................................................................... 57 Ireland ............................................................................................................ 58 Italy ................................................................................................................ 60 Latvia .............................................................................................................. 62 Lithuania ........................................................................................................ 65 Luxembourg ................................................................................................... 66 Malta .............................................................................................................. 68 The Netherlands ............................................................................................ 69 Poland ............................................................................................................ 71 Portugal .......................................................................................................... 73 Romania ......................................................................................................... 76 Slovakia .......................................................................................................... 77 Slovenia .......................................................................................................... 79 Spain .............................................................................................................. 81 Sweden .......................................................................................................... 83 Conclusions ............................................................................................. 87 Annex: Overview table ............................................................................ 89 Disclaimer: Please note that this document is a discussion paper aiming to animate discussion between Member States. This document does not reflect the official position of the European Commission nor the intention of EU Member States. INTRODUCTION 01 The success of the approach founded in the eIDAS The present study is based on a desk research carried out Regulation to ensure that online public services are to investigate multiple aspects related to eID and is available to users across borders thanks to mutually composed of two main parts: recognised digital identity means, is dependent upon • The first part (chapters 2 and 3) highlights the national efforts and approaches towards eID. trends related to the adoption of national eID The system of mutual recognition of eID means pursued strategies, as well as the set-up nationally of the eID through eIDAS is only effective if Member States make ecosystem. The report looks at the form that eID efforts at national level to promote the widespread use strategies take, the main objectives countries of eID and the availability of services using these pursue, and the presence of legal requirements to identification technologies. hold eID. In addition it assesses the role of the state in the eID ecosystem in different countries, and the No Member State can look solely at their own nationally availability of different online public services using available eID(s) when developing strategies for e- eID. services and eID usage and this should be reflected in this report. • The second part (chapter 4) provides a detailed overview of each EU27 Member State with a With this in mind, the following report provides an structured set of information on the various overview of the national approaches to electronic dimensions of the national eID landscape, including identification, describing how the 27 Member States are the documents in which the eID strategy is rolling out eID solutions to ensure that digital services contained, the eID means available, the set-up of can be securely accessed both at national and at the eID ecosystem and the level of use of eID. This European level. The report focusses on the approaches allows the reader to easily compare them and have towards eID outlined in national strategy documents, an overview of the level of maturity of each Member together with other supporting documentation and web State with regard to eID. Further facilitating this, the resources, with the aim of offering a thorough main features of each country in relation to eID is understanding of the eID state of play across Europe. summarised in an Overview table in the Annex This understanding of national strategies can feed into (p.89). discussions on future EU-level action on eID. 6 OVERVIEW OF NATIONAL EID STRATEGIES AND LEGAL FRAMEWORK 02 National public administrations within the EU differ plans to update these cards to comply with the new significantly in terms of the extent to which they have European regulation may also be accompanied by plans formally laid out their strategic vision for eID. Some have to upgrade or otherwise alter the eID capabilities of the a stand-alone eID strategy describing key objectives and card. This chapter, therefore, also includes an overview approaches, others have a section of broader of the countries’ plans to upgrade their national ID cards digitalisation strategy dedicated to eID, still others just in response to the new regulation. make a short reference to eID in their digitalisation Finally, the chapter considers the legal framework of EU strategy, while for the remainder no strategic document countries within which the eID means are used, to referring to eID has been identified. analyse in particular whether citizens are required to This chapter provides an overview of the extent to which hold at least one eID means. The presence of such legal EU countries have adopted formalised eID strategies. requirements may help increase the uptake of eID. Furthermore, it analyses the main objectives adopted within the strategies, in order to reveal recurring and common patterns across countries. eID Strategy Formalisation The new European Regulation (EU) 2019/1157 may affect the way in which some national governments This chapter focuses on the way that national strategy update their eID means. The legislation introduces new documents formalise or otherwise make reference to security and technological requirements for national eID means. Legislative measures concerning eID are out identity cards. As many EU countries have integrated eID of scope of this analysis. This focus on strategies can help functionalities within their national identity cards, and identify whether the provision of an eID means is the use these cards as one of their primary eID means, any expression of a durable vision and falls into a medium- 7 long term plan, possibly encompassing a wider an