EUDI Wallet 2026/2027 – PTS registration, attribute request & GDPR | Word/PDF/Excel

Is your company planning to accept digital identity or electronic attribute credentials from EU identity wallets? This niche document package helps Swedish service providers prepare for registration as a wallet-relying party, document the data the service intends to request, assess necessity and GDPR compliance, and monitor technology providers and changes. The product is a readiness and administrative working document, not an actual registration, digital wallet, certificate, or technical integration.

Who it is for: Swedish companies, public sector organisations, e-service providers, development teams, and integrators planning to use the EUDI Wallet in a digital customer/user service. It does not automatically apply to all online shops, all BankID users, or all services using standard electronic signing.

Five specialised templates – file by file

1. Applicability and role assessment: determines whether you are a relying party, who legally provides the service, and whether a technical intermediary is involved. Distinguishes registration obligations from specific obligations to accept wallets under Article 5f of eIDAS.
2. Registration materials for Sweden: compile organisational identity, contact details, service name, service description, registered attributes, and any intermediary under Article 5b and Annex I of the Implementing Regulation. The materials are not an official PTS application.
3. Attribute request and data minimisation: distinguish necessary credentials from excessive data, link each request to its purpose, registered scope, legal basis, and secure storage flow.
4. User information and privacy notice: prepare clear information about who is requesting the data, what data is being requested, why, where it is stored, and what options/rights actually exist.
5. Integration and change control: checkpoints for certificates, errors and over-requesting, pseudonym queries, the intermediary's role, and registration changes without undue delay.

Which EU rules apply – and when?

Regulation (EU) 2024/1183 amends eIDAS (EU) 910/2014. According to Article 5b, a relying party intending to use European digital identity wallets for digital interaction must register in its Member State of establishment. The organisation must state what data it intends to request and may not request any other data than that specified; changes must be notified without delay.

Implementing Regulation (EU) 2025/848, with registration requirements in Annex I, enters into force on 24 December 2026. The provisions have been amended by (EU) 2026/1730, including regarding intermediaries and relevant technical specifications. A registration is not a guarantee that all use, every attribute, or every certificate is approved by the authorities.

Swedish implementation plan: PTS is responsible for the register of relying parties. The authority's practical application instructions are still being developed. Digg's Swedish wallet will begin in a test environment in December 2026, with a broader rollout in stages over the coming years. The start date for the registration rules is not the same as the general availability of a completed, Swedish-certified wallet.

The Excel register – nine tabs

Overview, Services, Registration materials, Attribute request, Data minimisation, Providers, Test and control, Changes, and Sources. The workbook contains filterable registers, status selections, sources, and a compilation of actual registrations, tests, and changes. The attribute sheet provides indicative flags when a request is marked as unnecessary or outside the registered scope. A green/OK flag is never a legal approval or technical verification result.

Three examples of real-world business needs

Age verification: can the service have confirmation that the user is over a certain age instead of requesting a full date of birth? Credential: can a B2B service check role and authorisation without unnecessary identity attributes? Login through an integrator: who is the legal relying party, how are certificates validated, and how can the intermediary be prevented from storing the transaction content?

Frequently asked questions

Must all Swedish e-commerce companies register with PTS in 2026?

No, not automatically. Article 5b applies to the operator intending to rely on the EUDI Wallet for digital services. The obligation to accept a wallet under Article 5f has specific conditions and a different timeline. Check the specific service, the company's role, and current national information.

Can I send the Word file as an official PTS application?

No. It is a checklist and preparatory material. Use the official PTS registration process when it becomes available and save actual receipts.

Can we request a full personal identity number for age verification?

Not without separately assessing whether such a level of detail is actually necessary and supported by a legal basis. eIDAS and GDPR require that requested information is necessary and proportionate. An age credential may sometimes provide less information.

Does the product also apply to technical intermediaries?

Yes, it includes intermediary control. Article 5b.10 treats intermediaries as relying parties and limits their storage of transaction content. The actual contractual and technical chain must be checked.

Are all documents translated into English?

No. Five working documents and the Excel workbook are in Swedish, along with a Swedish and an English user guide. The PDFs are searchable and printable but are not fillable interactive forms.

Version, sources, and quality

Version 1.0, internal legal source check 9 November 2026. Primary legal sources: eIDAS (EU) 910/2014 as amended by (EU) 2024/1183; (EU) 2025/848 as amended by (EU) 2026/1730; GDPR (EU) 2016/679. Official Swedish sources: PTS and Digg. No independent external legal review, regulatory approval, issuance of relying party certificates, or technical integration certification has been conducted. The package does not constitute a guarantee of compliance.