By the end of 2026, every country in the European Union is legally required to offer its citizens and residents a digital identity wallet — an app that can hold your ID, your driver's license, your diplomas and more, and prove who you are with a tap [source: EUR-Lex, 2024]. Across the Atlantic, 21 US states plus Puerto Rico already issue mobile driver's licenses you can add to Apple or Google Wallet, and the Transportation Security Administration accepts them at more than 250 airport checkpoints [source: AAMVA, 2026][source: TSA, 2026]. India has enrolled roughly 1.34 billion people in a biometric ID system that now handles tens of billions of authentications a year [source: UIDAI, 2025]. And in Britain, a petition against a proposed national digital ID gathered nearly three million signatures and forced a debate in Parliament [source: UK Parliament, 2025].
Put together, these headlines describe one of the largest changes to everyday life in a generation: the slow migration of official identity from a plastic card in your pocket to an encrypted credential on your phone. Governments and industry frame it as convenience and fraud protection. Privacy advocates warn it could become the infrastructure for surveillance and exclusion. Both are describing the same technology. This piece separates what has actually been legislated and deployed from what is still being promised or feared — and lays out why the design choices being made right now matter far more than the marketing on either side.
Why this is happening now
Digital identity is not a new idea, but several forces converged to make it real at scale. Smartphones became universal, and both Apple and Google built identity features directly into their wallet apps, giving governments a distribution channel that reaches almost everyone. International standards matured: the ISO/IEC 18013-5 specification gave mobile driver's licenses a common technical format so a credential issued in one place can be read in another [source: AAMVA, 2026]. And after years of costly identity fraud and clumsy online age and identity checks, governments began treating a trustworthy digital ID as core public infrastructure rather than an experiment.
The World Bank, which runs an "Identification for Development" program, counts more than 100 countries implementing or piloting national digital ID systems, and argues they can cut fraud, widen access to services, and bring people into the financial system [source: World Bank, 2026]. Its own data underlines the stakes: back in 2017, lack of documentation was a barrier to a bank account for 26% of unbanked adults in low-income countries [source: World Bank, 2017]. For a person who has never been able to prove who they are, a digital ID can be genuinely transformative. That promise — inclusion — is the strongest argument in its favor, and it is worth holding in mind alongside the criticisms.
Europe's big bet: the EUDI Wallet
The most ambitious program is the European Union's. In 2024 the EU adopted Regulation (EU) 2024/1183, known informally as "eIDAS 2.0," which was published in the Official Journal on 30 April 2024 and entered into force on 20 May 2024 [source: EUR-Lex, 2024]. It obliges every member state to make at least one European Digital Identity (EUDI) Wallet available to its citizens and residents — with the European Commission targeting the end of 2026 for availability [source: European Commission, 2026]. By 2027, sectors that are legally required to verify identity strongly — banks, telecoms and others — must accept the wallet when a user chooses to present it [source: EUR-Lex, 2024].
This is not a paper plan. Since April 2023, four large-scale pilot projects have tested the wallet across 26 member states plus Norway, Iceland and Ukraine, involving more than 350 private and public entities in use cases from opening bank accounts to storing mobile driver's licenses [source: European Commission, 2026]. The Commission emphasizes a privacy feature called "selective disclosure": rather than handing over your whole ID, the wallet can reveal a single attribute — proof that you are over 18, say — without exposing your name or birth date [source: European Commission, 2026]. In principle, that is a genuine privacy advance over showing a physical card that reveals everything at once.
The key word is "in principle." Selective disclosure protects you only if the rest of the system is built to prevent you from being tracked across the many places you use the wallet — and that is exactly where the fight is now.
The privacy critique: from "Orwell's Wallet" to 2026
European digital rights groups have warned about this design since the law was being written. In an influential 2022 analysis titled "Orwell's Wallet," the EDRi member organization epicenter.works argued that the framework risked creating a lifetime, persistent unique identifier for every European, that it would compel private companies to accept the wallet, and that consent is meaningless when you are legally required to identify yourself [source: EDRi, 2022]. Their point was subtle but important: a privacy feature like selective disclosure is undermined if the underlying credential still carries an identifier that lets different services link your activity together.
Those concerns did not disappear once the law passed — they moved to the fine print. In March 2026, EDRi and nine other civil-society organizations published a joint statement warning that the Commission's implementing acts — the detailed technical rules that decide how the wallet actually behaves — were weakening its untraceability and unlinkability safeguards [source: EDRi, 2026]. They flagged additional mandatory processing of sensitive biometric facial data not foreseen in the original regulation, and a narrow reading of the rules that, in their view, "makes over-identification of users the default" [source: EDRi, 2026]. The wallet, they cautioned, still "risks becoming a tool of surveillance and control" [source: EDRi, 2026].
The important thing for a reader is the layer this argument lives on. Nobody serious claims the EU intends to build a surveillance state. The dispute is about defaults and technical guarantees: whether "privacy by design" is written into the code and enforced, or left as an aspiration that erodes in the implementation details. That is a debate about engineering and law, not motive — which is precisely why it is easy to miss and hard to reverse once the systems ship.
America's quieter rollout: mobile driver's licenses
The United States has no single national digital ID; it is arriving state by state, mostly as the mobile driver's license (mDL). As of 2026, 21 states plus Puerto Rico issue an mDL built on the ISO/IEC 18013-5 standard, and the TSA accepts these digital IDs at more than 250 airport checkpoints — while still advising travelers to carry a physical card as backup [source: AAMVA, 2026][source: TSA, 2026]. The pitch mirrors Europe's: a phone-based license can share only the data a situation requires, so a bartender checking your age need not see your home address [source: AAMVA, 2026].
California is the clearest case of scale. In 2026 the state reported roughly 1.7 million active mobile driver's licenses — about 900,000 in California's own DMV Wallet app and the rest spread across Apple, Google and Samsung wallets [source: Governor of California, 2026]. On 13 July 2026, Governor Gavin Newsom signed SB 169, a law that raised the cap on the state's mDL program from 15% to 60% of licensed drivers, clearing the way for tens of millions more [source: Governor of California, 2026].
Yet adoption is measured, not universal, and here perception and reality diverge. Independent reporting has found that in several states uptake remains modest, largely because there are still few places that actually accept a digital license — Alaska's first month, for instance, saw only marginal downloads [source: Biometric Update, 2025]. That gap matters: a credential is only as useful as the number of doors it opens, and much of the American rollout is still in the phase where the technology exists but the acceptance network is thin. The headlines say "digital ID is here"; the ground truth in 2026 is "digital ID is arriving, unevenly."
The world's largest experiment — and its warning
No country has gone further than India. Its Aadhaar system has enrolled about 1.34 billion people — the government says roughly 99% of adults — and processed 2,707 crore (27.07 billion) authentication transactions in the 2024-25 fiscal year alone [source: UIDAI, 2025]. Aadhaar is now the backbone of everything from bank accounts to subsidized food, and it is the most-cited proof that population-scale digital ID is possible.
It is also the most-cited warning about what can go wrong, and the two sides sit on different evidentiary footing. The scale figures come from the government. The problems are documented mainly by journalists and researchers: when access to essential services depends on a fingerprint or iris scan matching a database, the people whose biometrics fail — manual laborers with worn fingerprints, the elderly, those in areas with poor connectivity — can be shut out of food rations or guaranteed work. Independent reporting has described authentication failure rates around 6.5%, meaning that out of roughly 312 million monthly biometric authentications, tens of millions can fail, with documented cases of people denied the rations they were entitled to [source: The Wire, 2025][source: Biometric Update, 2025]. These are not the government's numbers, and they should be read as serious independent findings rather than official statistics — but they point to a hard truth: a digital ID that becomes mandatory for survival turns a technical error into a denial of rights. Digital exclusion is not a hypothetical; it is Aadhaar's lived lesson for every country now building similar systems.
Britain's backlash: a nation argues about ID
Not every population accepts digital ID quietly. In September 2025, UK Prime Minister Keir Starmer announced a national digital identity scheme — nicknamed "BritCard" — pitched largely as a tool to control illegal migration by making a digital ID mandatory for the right-to-work checks employers must perform [source: House of Commons Library, 2026]. The backlash was immediate. A parliamentary petition titled "Do not introduce Digital ID cards" gathered 2,984,191 signatures — among the largest in British history — and was formally debated in Parliament on 8 December 2025 [source: UK Parliament, 2025].
The government adjusted course. By January 2026 it had stepped back from the most contentious "mandatory to obtain" framing, emphasizing that other forms of ID would still be accepted, and repositioning the scheme around convenience rather than compulsion, built on the existing GOV.UK One Login service used by around 12 million people [source: House of Commons Library, 2026]. Britain's experience is the clearest demonstration that the technology is the easy part. The hard part is public trust — and trust turns almost entirely on one question: is the ID something you may use, or something you must carry?
What to watch
Strip away the marketing and the alarm, and 2026 looks like this: digital identity wallets are no longer a forecast but a fact, being rolled out to hundreds of millions of people, while the rules that determine whether they empower or endanger those people are still being written. The convenience is real. The privacy risks are real. The exclusion risk, as India shows, is not theoretical. None of these cancels the others out.
Three things will tell you which way it is heading. First, the technical fine print in the EU — whether the implementing acts lock in genuine unlinkability and make selective disclosure the enforced default, or let it erode, as EDRi warns [source: EDRi, 2026]. Second, whether "you may use it" quietly becomes "you must use it" — the line the UK backlash was really about, and the one that separates a convenience from a checkpoint [source: House of Commons Library, 2026]. Third, whether systems are built with offline and non-digital fallbacks so that a failed scan or a dead phone never becomes a denial of food, work or travel — the lesson Aadhaar has already taught at the cost of real people [source: The Wire, 2025]. The wallet on your phone is coming either way. Whether it serves you or watches you will be decided by choices being made this year, mostly out of the headlines.