Introduction
Europe is rapidly moving towards adopting digital ID wallets, an innovation aimed at simplifying citizens' access to public services and online age verifications. However, this initiative, while commendable on paper, could inadvertently strengthen the grip of American tech giants like Google and Apple. Behind this ambition lies a troubling paradox: enhancing digital sovereignty while becoming reliant on the security infrastructures of these private giants.
The Role of Security APIs
The EU's digital wallets rely on security services such as Google's Play Integrity API and Apple's Managed Device Attestation. These "remote attestation" security services ensure that wallet applications run on untampered devices. However, Google's API goes further. It checks if an app runs on a Google-certified Android device, thus excluding unlicensed alternatives like e/OS or GrapheneOS. Consequently, embedding the Google Play Integrity API into public infrastructure risks reinforcing Google's ecosystem, directly contradicting the EU's Digital Markets Act (DMA).
Consequences for Digital Sovereignty
This growing dependence on proprietary technologies raises critical questions about Europe's digital sovereignty. By embedding these APIs into their digital ID systems, European governments may unwittingly cement Google's monopoly while excluding alternative operating systems. For instance, digital wallet developers in the Netherlands and Italy have already implemented Play Integrity, effectively excluding users of de-Googled systems.
Possible Alternatives
More open alternatives exist, such as Android's Hardware Attestation API, which provides hardware-based security checks without enforcing Google's ecosystem policies. However, these solutions are largely overlooked in favor of the more integrated services of Google and Apple. This strategic choice raises the question of whether Europe is truly committed to breaking up big tech monopolies or if it is contributing, willingly or not, to their reinforcement.
Economic and Technological Implications
Considering the economic impact, the increased reliance on American infrastructures could stifle local innovation and limit the growth of European tech companies. In 2022, Europe accounted for approximately 23% of the global digital services market, but its dependence on non-European technologies could slow its advancement and technological independence.
Conclusion
The rollout of digital ID wallets in Europe is an initiative worthy of praise for its vision of administrative simplification. However, it must be undertaken cautiously to avoid compromising European digital sovereignty. Policymakers need to carefully assess the implications of technological choices and explore more open solutions that do not reinforce existing monopolies.
Let's discuss your project in 15 minutes.