eIDAS 2.0 does not apply directly to non-EU residents as individual citizens, but it does affect them in practical ways. If you live outside the EU but interact with European digital services, work for a company operating in Europe, or hold credentials issued by a third country, the regulation shapes how your identity is verified and trusted across EU borders. This article walks through the most common questions non-EU residents and global organisations have about eIDAS 2.0 and what it means for them.
Does eIDAS 2.0 apply to people outside the EU?
eIDAS 2.0, which amends Regulation (EU) 910/2014, is an EU regulation that directly governs EU Member States, their citizens, and their residents. It does not impose legal obligations on individuals living outside the EU. However, non-EU nationals who access European digital services, cross EU borders, or engage with EU-based organisations will encounter systems and requirements shaped by eIDAS 2.0 whether they realise it or not.
The regulation requires that all EU Member States provide a digital identity wallet to their citizens and residents by 24 December 2026. Residency in an EU country, regardless of nationality, is the key criterion. This means a non-EU national who legally resides in Germany or the Netherlands, for example, would be entitled to receive an EUDI Wallet just like any EU citizen. National rollout, certification, and practical interoperability will develop in phases, and the level of maturity across individual Member States may vary beyond that date.
For people living entirely outside the EU, eIDAS 2.0 does not grant rights or impose duties. The services they use and the organisations they interact with in Europe are bound by it, which creates indirect effects that are worth understanding.
Can non-EU residents use the EUDI Wallet?
Non-EU residents who hold legal residency in an EU Member State are eligible to receive and use the European Digital Identity Wallet. The EUDI Wallet is designed for all citizens and residents of EU countries, not only EU passport holders. A third-country national with a valid residence permit in an EU country falls within the scope of the wallet rollout.
For people who live entirely outside the EU with no formal residency status in a Member State, access to the EUDI Wallet is not currently provided. Wallets are issued by national authorities or approved wallet providers within each Member State and are tied to verified residency or citizenship status in that country. Governance of the overall framework is a shared responsibility: the European Commission manages the legal framework and adopts implementing acts, Member States provide or mandate wallet solutions and supervise actors within their jurisdiction, and the European Digital Identity Cooperation Group supports cross-border alignment and cooperation.
The wallet’s underlying architecture is built with interoperability in mind. The four Large Scale Pilots ran from April 2023 to 2025 and tested use cases such as digital travel credentials, cross-border payments, and healthcare access across participating Member States, Norway, Iceland, and Ukraine. These scenarios often involved interactions with non-EU parties, and the technical standards developed are designed to support trusted data exchange beyond EU borders over time. The Architecture and Reference Framework provides the technical elaboration of the requirements set out in the legally binding implementing acts, and it is designed with openness to future international connections. Participation in the pilots does not automatically confer the same status as a certified and notified EUDI Wallet, and the practical availability of cross-border use cases will develop in phases.
In practical terms, non-EU residents visiting Europe or using European digital services may encounter wallet-based verification as a preferred or required method. Understanding how the EUDI Wallet works, even without holding one, helps organisations and individuals prepare for these interactions.
How does eIDAS 2.0 affect non-EU businesses operating in Europe?
Non-EU businesses that operate in Europe, offer services to EU residents, or integrate with EU digital infrastructure are directly affected by eIDAS 2.0. The regulation sets out requirements for how identity verification, electronic signatures, and trust services must work across the EU. Any organisation providing these services to European users or accepting them from European users must align with these standards.
The most significant implications for non-EU businesses include:
- Accepting EUDI Wallets as a verification method: From 24 December 2026, public sector bodies must accept notified EUDI Wallets for online services that require electronic identification. From 24 December 2027, Article 5f of eIDAS 2.0 extends mandatory acceptance to relevant regulated private sectors, including financial services, healthcare, telecommunications, energy, transport, education, social security, drinking water, postal services, digital infrastructure, and digital services, where strong user authentication is required by law or contract. Very large online platforms are subject to a separate provision under Article 5f: they must accept wallet-based authentication where they require users to authenticate, on the voluntary request of the user and for the minimum necessary data. Micro and small enterprises, defined as organisations with fewer than 50 employees and an annual turnover or balance sheet total of no more than 10 million euros, are exempt. Relying-party registration is governed by CIR (EU) 2025/848 of 6 May 2025, which requires each relying party to register with the national authority of its Member State of establishment before requesting wallet data.
- Qualified trust services: Electronic signatures and seals used in cross-border transactions with EU entities must meet eIDAS standards to be legally recognised. Non-EU businesses relying on their own national signature solutions may find that these are not automatically accepted.
- Data minimisation and selective disclosure: The EUDI Wallet allows users to share only the attributes strictly necessary for a transaction. Non-EU businesses interacting with wallet holders must be prepared to receive selective, attribute-based identity data. Under CIR (EU) 2025/848, a relying party registers the specific attributes and attestations it intends to request per intended use, and the wallet checks each request against that registered scope.
- Interoperability requirements: Systems that exchange identity data with EU organisations need to support the technical standards and trust frameworks defined under eIDAS 2.0. Cross-border interoperability operates at the framework level, but sector-specific legislation and national requirements remain in place and do not disappear simply because a wallet credential is presented.
For businesses in sectors such as financial services or pharmaceuticals that already operate under strict compliance requirements, eIDAS 2.0 adds another layer to manage. Aligning with the regulation is important for maintaining trusted, frictionless relationships with EU partners and customers.
What happens to digital identity credentials issued outside the EU under eIDAS 2.0?
Digital identity credentials issued outside the EU are not automatically recognised under eIDAS 2.0. Recognition depends on whether a third country has established a formal equivalence agreement or mutual recognition arrangement with the EU. Without such an agreement, credentials issued by non-EU authorities do not carry the same legal weight as eIDAS-compliant credentials within the EU.
This does not mean third-country credentials are without value in European contexts. Organisations can still use them as supporting evidence during identity verification processes. However, they cannot be treated as equivalent to a qualified or high-assurance credential under eIDAS 2.0 without additional verification steps.
The regulation does leave room for third-country interoperability to develop. The Architecture and Reference Framework that underpins the EUDI Wallet is designed with openness in mind, and the European Commission has signalled interest in building connections with trusted international identity systems over time. Norway, Iceland, and Ukraine were already involved in the Large Scale Pilots, which demonstrates that the EU is thinking beyond its formal borders when designing the ecosystem. Participation in those pilots does not automatically confer the same status as a certified and notified EUDI Wallet, and the practical availability of cross-border use cases will develop in phases.
For organisations that issue or rely on non-EU credentials, the practical recommendation is to map those credentials against eIDAS assurance levels and determine where additional verification may be required when operating in European contexts.
How should organisations prepare for eIDAS 2.0 when serving both EU and non-EU users?
Organisations serving a mix of EU and non-EU users need a digital identity strategy that works across both contexts without creating two entirely separate user experiences. The goal is to build a flexible, standards-aligned infrastructure that can handle eIDAS-compliant credentials from EU users while still supporting trusted verification for users from outside the EU.
A practical preparation approach involves the following steps:
- Audit your current identity verification flows. Understand which user journeys involve EU residents and which involve third-country nationals. Identify where eIDAS 2.0 requirements apply and where they do not.
- Align with eIDAS assurance levels. Map your existing verification methods to the Low, Substantial, and High assurance levels defined under eIDAS. This helps you identify gaps and prioritise upgrades.
- Prepare to accept EUDI Wallet credentials. The legal deadline for Member States to make wallets available is 24 December 2026. Public sector bodies must accept notified wallets from that date. For regulated private sector relying parties, the mandatory acceptance deadline under Article 5f is 24 December 2027. Build acceptance of wallet-based credentials into your onboarding and authentication flows, and note that national rollout and relying-party registration processes under CIR (EU) 2025/848 will vary by country.
- Design for selective disclosure. The EUDI Wallet enables users to share only the attributes needed for a specific transaction. Your systems should be able to request and process attribute-level data, within the scope registered per intended use, and process responses accordingly.
- Review your electronic signature and trust service arrangements. If you use electronic signatures in cross-border EU transactions, confirm that your current solution meets eIDAS requirements or identify a qualified alternative.
Organisations in government services or healthcare face particular urgency, as these sectors are among the first to be affected by mandatory wallet acceptance requirements. Starting the preparation process now, rather than waiting for a single European go-live moment, puts organisations in a much stronger position.
Exploring the right implementation approach early also reduces the risk of costly rework later, especially for organisations managing complex, multi-jurisdictional user bases.
How TrustTech supports eIDAS 2.0 and cross-border digital identity
Navigating eIDAS 2.0 when your organisation serves both EU and non-EU users is genuinely complex. TrustTech addresses this through the ID Connector, an integration that lets relying parties accept every certified European wallet, whatever Member State issued it, for identification, login and qualified signing. EUDI Wallet acceptance comes first; the same interface also carries other IDs, such as national eIDs, bank IDs and identity documents, inside and outside the EU.
For organisations managing cross-border identity across EU and non-EU user bases, the ID Connector handles:
- Wallet acceptance and trust management: The ID Connector verifies wallet credentials by checking issuer signatures against the relevant national trusted lists, which are brought together in the EU List of Trusted Lists, and by validating wallet unit attestations to confirm that the presenting wallet runs on a certified wallet solution.
- Registered attribute scope: The ID Connector enforces the attribute and attestation scope registered per intended use under CIR (EU) 2025/848, so that each data request stays within the bounds of what was registered with the national authority.
- Reusable identity data: Verified identity attributes can be reused across onboarding, KYC, and signing workflows, reducing repeated checks for both EU and non-EU users.
- Qualified signing: The ID Connector connects to a qualified trust service provider for qualified electronic signing workflows where required.
- Sector coverage: The ID Connector is suited to the regulatory and operational requirements of financial services, healthcare, pharma, and government, where the mandatory acceptance deadlines and compliance obligations are most immediate.
If your organisation is working through the implications of eIDAS 2.0 for EU and non-EU user journeys, get in touch with TrustTech to discuss your specific situation and find out how the ID Connector fits into your identity infrastructure.