Germany’s digital wallet could launch before the features that let people reveal less

Germany plans to launch its state digital wallet, d-you, on January 2, 2027. At an October 6 Bundestag hearing, experts warned that the initial identity function would precede important privacy protections, including pseudonymous logins and ways to prove a fact without disclosing a complete identity. Driver’s-licence and other functions are intended to follow later.

The practical distinction is between establishing that a person meets a requirement and handing a service a reusable identity record. The federal data-protection authority’s representative warned that the initial implementation permits real-name identification. Consumer advocates fear users will shoulder the burden of deciding whether each request for data is proportionate, reproducing the consent fatigue associated with cookie banners.

Bianca Kastl’s parliamentary submission identifies another concern: the cloud security component concentrates operational risk, while cryptographically signed information makes a leaked record unusually valuable because its authenticity can be checked. These are architectural criticisms, not reports that the wallet has already been breached. The developer’s representative defended the design as a balance among security, privacy and usability.

Several witnesses proposed checking service providers’ data requests before they can use the wallet, instead of leaving every decision to the individual. Analysis: early defaults matter. If businesses build around full identification at launch, later privacy features may struggle to undo those expectations. The policy test is whether the system makes minimal disclosure normal from the beginning.