Wallet-relying party registration
Under eIDAS Article 5b, organisations must register as a wallet-relying party before requesting data from an EUDI Wallet user.
Wallet-relying party registration is the duty, set out in eIDAS Article 5b, for any relying party that wants to use the EUDI Wallet to identify a user or receive attributes from them: Where a relying party intends to rely upon European Digital Identity Wallets for the provision of public or private services by means of digital interaction, the relying party shall register in the Member State where it is established. The registration must state at minimum the Member State in which the relying party is established; the name of the relying party and, where applicable, its registration number as stated in an official record together with identification data of that official record; the contact details of the relying party; and the intended use, including which attributes it will request. The registration process itself has to be cost-effective and proportionate to risk. The detailed mechanism - national registers, the processes around them, and the certificates a relying party uses - is laid down in Commission Implementing Regulation (EU) 2025/848 of 6 May 2025 on the registration of wallet-relying parties; check its own application date before assuming those registers are already operating.
Once registered, a relying party is entered in its Member State's public register, which is covered by notification rules under Commission Implementing Regulation (EU) 2024/2980: this Regulation establishes obligations in relation to notifications that enable the validation of... the electronic registers used by a Member State to publish information on wallet-relying parties registered in that Member State in accordance with Article 5b(5) of Regulation (EU) No 910/2014. This lets a wallet app allow users to verify the authenticity and validity of the identity of relying parties registered in accordance with Article 5b before releasing any data, and if a relying party misuses that access, supervisory bodies are to be enabled to suspend and cancel the registration required pursuant to Article 46a(4), point (f) of Regulation (EU) No 910/2014.