EU Countries Explore EUDI Wallets for Voter Authentication - Digital Democracy

Several EU member states pilot EUDI Wallet authentication for online voting and election registration.

Estonia's Pioneering E-Voting Experience

Estonia holds the distinction of being the first country in the world to offer legally binding internet voting in national elections, introducing the system in 2005. Since then, e-voting participation has grown steadily, reaching 51 percent of all votes cast in the 2023 parliamentary elections. This extensive track record provides invaluable data on the practicalities, security challenges, and social dynamics of digital voting, making Estonia the natural leader for EUDI Wallet integration in electoral processes.

The Estonian e-voting system currently relies on the national ID card or Mobile-ID for voter authentication. Voters authenticate using their electronic identity, receive a digital ballot, make their selection, and submit an encrypted vote. The EUDI Wallet integration replaces the national ID card authentication with a standardized European credential presentation, while maintaining the proven encryption and verification mechanisms that ensure ballot secrecy and election integrity.

The Estonian experience has also revealed important lessons about public trust in digital voting. Initial adoption was slow, with only 1.9 percent of votes cast online in 2005. Trust grew through transparency, regular security audits, and the practical experience of millions of citizens using the system across multiple elections. These lessons inform the broader EUDI Wallet voting pilot, which emphasizes gradual introduction starting with lower-stakes municipal elections before potential expansion to national and European elections.

Security Architecture for Electoral Authentication

The security requirements for electoral authentication are among the most stringent of any EUDI Wallet use case. Elections are high-value targets for state-sponsored cyber operations, and the consequences of compromised electoral integrity extend far beyond financial loss to threaten the foundations of democratic governance. The EUDI Wallet's security architecture for voting applications incorporates multiple layers of defense designed to withstand sophisticated attacks.

At the authentication layer, the EUDI Wallet provides Level of Assurance (LoA) High, requiring biometric verification combined with cryptographic key operations in a certified secure element. The voter must physically possess their smartphone and present their biometric (fingerprint or face) to authenticate. This two-factor combination, something you have (the device) and something you are (the biometric), provides strong resistance against remote identity theft and credential replay attacks.

The separation between authentication and ballot casting is enforced through cryptographic protocols that prevent any party, including the election organizers, from linking a voter's identity to their vote. The authentication phase produces a blind credential that proves the voter is eligible without revealing their specific identity to the ballot system. This mathematical guarantee of ballot secrecy is stronger than the physical separation achieved in traditional polling stations, where election observers can potentially see voters entering booths.

The Role of National Cybersecurity Agencies

National cybersecurity agencies play a critical role in ensuring the security of EUDI Wallet-based voter authentication. Germany's Federal Office for Information Security (BSI), France's National Agency for the Security of Information Systems (ANSSI), and the Netherlands' National Cyber Security Centre (NCSC-NL) are providing security oversight and certification for the electoral authentication components. Their involvement adds an additional layer of assurance beyond the standard EUDI Wallet security certification.

BSI has conducted a complete threat analysis specific to the electoral use case, identifying attack vectors ranging from device-level compromises to network-level interception and social engineering attacks targeting election officials. The analysis informs specific security requirements that go beyond the baseline EUDI Wallet specifications, including enhanced monitoring during election periods, rapid incident response protocols, and backup authentication mechanisms for situations where the primary EUDI Wallet system experiences disruptions.

ANSSI has developed a certification framework for electoral authentication systems that integrates with the French CSPN (Certification de Securite de Premier Niveau) and Common Criteria evaluation standards. Electoral authentication components must achieve higher evaluation assurance levels than standard commercial applications, reflecting the exceptional sensitivity of the democratic process. These certifications provide transparent evidence of security that can be scrutinized by political parties, civil society organizations, and international election observers.

Municipal Election Pilots and Lessons Learned

The pilot programs in Estonia, the Netherlands, and France are focused on municipal elections, which provide an ideal testing environment for several reasons. Municipal elections have lower stakes than national elections, reducing the political sensitivity of any technical issues. They occur more frequently in most countries, providing regular opportunities for testing and iteration. And the smaller voter pools enable more manageable deployments while still generating statistically meaningful data about system performance and user behavior.

The Dutch pilot involves five municipalities that collectively represent a diverse cross-section of the population, including urban, suburban, and rural communities. The pilot tests EUDI Wallet-based check-in at physical polling stations alongside traditional identification methods, allowing direct comparison of processing times, error rates, and voter satisfaction. Preliminary results show a 60 percent reduction in check-in time and significantly fewer registration discrepancies compared to paper-based voter register lookup.

The French pilot takes a more conservative approach, using EUDI Wallet authentication for voter registration and postal ballot applications rather than polling station check-in or online voting. This reflects France's particular concern about maintaining the solemnity and civic ritual of in-person voting while using digital identity for the administrative aspects of the electoral process. The pilot is providing valuable data on how digital registration affects voter turnout, particularly among mobile EU citizens and overseas voters.

Future Perspectives for Digital Democracy

The EUDI Wallet voter authentication pilots represent just the beginning of a broader conversation about digital democracy in Europe. While the immediate focus is on improving existing electoral processes, the technology opens possibilities for new forms of democratic participation. Citizens' initiatives, participatory budgeting, deliberative polls, and referendum consultations could all use wallet-based authentication to verify participant eligibility and prevent manipulation.

The European Parliament has expressed interest in exploring EUDI Wallet authentication for the 2029 European Parliament elections, not necessarily for online voting but for streamlining voter registration across all 27 member states. The goal would be to ensure that every EU citizen, regardless of where they live in the EU, can register to vote in European elections through a simple, standardized process using their EUDI Wallet. This could significantly increase participation in European elections, which have historically suffered from low turnout, particularly among mobile citizens.

Academic research accompanying the pilot programs is examining the broader societal implications of digital voter authentication. Questions being studied include whether digital authentication increases or decreases trust in elections, how different demographic groups respond to the technology, whether digital registration reduces barriers for traditionally underrepresented voters, and how the availability of digital voting options affects overall civic engagement. These findings will inform future policy decisions about the appropriate role of digital identity in democratic processes across Europe.