Author: Ingolf Rauh

eIDAS: 4 key challenges that remain

If you are already a reader of this blog, you may have noticed that we at Swisscom Trust Services are fond of unified European regulations, especially the eIDAS legislation. Over the last few weeks, we've reviewed the latest Implementing Acts, collected essential questions in an FAQ, and examined new business opportunities through newly created Trust Services.

If you’re new here, maybe you want to look here first?

Despite all the positive aspects, some challenges still need to be solved to get the most out of eIDAS and create a trustworthy framework for pan-European digital identities. This is what we want to address in this week's blog.


In this article:

1. Overcome infrastructural gaps for the implementation of digital identities

An interoperable digital infrastructure across member states will be inevitable to ensure that national identity systems can seamlessly communicate and verify identities across borders. This requires investments in technology and harmonizing technical standards and protocols, particularly through consistently applying the revised eIDAS Regulation. Additionally, secure and scalable digital identity frameworks must be developed, including robust authentication methods (like biometrics or multi-factor authentication) and secure data storage systems that adhere to the EU’s stringent privacy and data protection laws, such as the GDPR.

Strong collaboration between EU institutions, national governments, private sector stakeholders, and civil society is essential to ensure the digital identity ecosystem is inclusive, reliable, and widely adopted. This includes encouraging private sector integration of digital identity systems (e.g., in banking, travel, and e-commerce) and coordinated funding and pilot projects that demonstrate feasibility and value to end users.

 

2. Outsmart the AI regulation rat race  

No technology in the history of humankind has developed as quickly as artificial intelligence. Technical books about AI are outdated by the time they are published – and this applies even more to regulations, at least if they are reactive. However, allowing AI to exist as a legal vacuum cannot be a solution either; the dangers that arise from deep fakes for digital identities, for example, are too great. Legislators currently face the major challenge of anticipating developments without precedent and proactively creating a legal framework that gives the technology room to develop but still curbs dangerous excesses.

 

 3. Foster private sector involvement 

Many first think of the public sector regarding eIDAS-related topics, mainly digital identities. This is, of course, true, but services based on eIDAS can also create real added value in the private sector. However, many companies still need to be convinced of this - some still have a negative attitude towards regulation from Brussels. In the case of eIDAS, however, an ecosystem is emerging from which the European digital economy can benefit, for example, by accelerating the conclusion of contracts using electronic signatures. Standardised electronic identities can also significantly simplify the onboarding of customers from other member states. As a trust service provider, we want to continue our persuasive work in this area and contribute to developing an ecosystem from which citizens and companies can benefit.

 

 4. Build public trust 

No matter how innovative, technologically mature, and efficient digital identities and the services based on them are, they will only become established if citizens accept them. Thus, public trust is another critical component, and it must be built through transparency, strong cybersecurity, and clear accountability structures. Citizens must feel confident that their digital identities are secure and under their control, which includes providing precise consent mechanisms and ensuring that data minimization principles and sovereign infrastructures are enforced. Moreover, widespread digital literacy and accessibility must be promoted to ensure equitable access to digital identity solutions, especially for older generations and less tech-savvy citizens.

 

If you want to know more about the latest changes and amendments to the eIDAS regulation and Implementing Acts, you can find a detailed overview in our State of the 2025 eIDAS Implementing Acts cheat sheet.

 

Do you have any questions? Contact us!