eu’s covid-19 ‘digital pass’ gateway system goes live

EU Launches Pan-European Digital Pass for COVID-19 Verification

A foundational technical infrastructure supporting the European Union’s initiative for a unified, region-wide “digital pass” – designed to verify COVID-19 vaccination or testing status – has become operational today. Several EU Member States are currently connected to this gateway, with further integrations anticipated prior to the planned full launch on July 1st.

Facilitating Safer Travel Within the EU

The EU’s COVID-19 digital certificate aims to establish a standardized system for the secure verification of EU citizens’ COVID-19 status. This encompasses confirmation of vaccination, recent negative test results, or documented recovery from the virus, all to streamline and enhance safety during travel across borders within the European Union.

Security Features of the Digital Pass

The digital pass utilizes QR codes and digital signatures, secured through the application of public key cryptography, to effectively prevent fraudulent use. Individuals without access to digital devices can still utilize paper-based certificates as an alternative.

Initial Rollout and Member State Participation

Member States that have successfully completed the required technical evaluations and are prepared to do so can begin issuing and verifying certificates on a voluntary basis, as announced by the Commission today. Currently, seven nations – Bulgaria, Czechia, Denmark, Germany, Greece, Croatia, and Poland – intend to participate in this initial phase.

Other countries have opted to initiate the EU Digital COVID Certificate system only after the complete deployment of all functionalities nationwide, it was added. Detailed information regarding the activation status of each Member State is accessible on a dedicated webpage.

System Testing and Implementation Timeline

According to the Commission, 22 EU countries have already successfully tested the gateway since May 10th. The objective is to achieve maximum system functionality by July 1st, coinciding with the enactment of the relevant regulation.

A six-week “phasing-in period” is permitted for the issuance of certificates for Member States requiring additional time for full integration. Consequently, the final implementations may occur late in the summer season. (An earlier target set by EU legislators for complete operational readiness by June appeared overly ambitious.)

Data Privacy and Security Measures

The Commission emphasizes that no personal data is either exchanged or stored during the COVID-19 digital certificate verification process. The cryptographic keys essential for verification are maintained on servers at the national level and are accessible – via the gateway – to national verification applications and systems throughout the EU.

Supporting Resources and Open-Source Code

To aid in the rollout, the Commission has also developed and published reference software and applications for certificate issuance, storage, and verification on GitHub. Twelve Member States have already leveraged this open-source code.

Certificate Issuance and Access

National authorities within each EU country are responsible for issuing the COVID-19 digital certificate to individuals. Citizens may obtain a certificate through various channels, including COVID-19 testing centers, local health authorities, or national eHealth portals.

Calls for Swift Implementation

In a statement released alongside the gateway launch, Stella Kyriakides, the EU’s commissioner for health and food safety, encouraged Member States to finalize their implementations promptly.

“The EU Digital COVID Certificate demonstrates the benefits of effective e-health solutions for our citizens,” she stated. “It is crucial that all Member States fully complete their national systems for issuing, storing, and verifying certificates in the coming weeks, ensuring the system is operational before the holiday season. EU citizens are eager to travel safely again, and possessing an EU certificate is a vital step towards achieving this.”

Temporary Nature of the System

Ursula von der Leyen, President of the Commission, noted that the system is intended to remain in effect for only one year – contingent upon the pandemic’s resolution by summer 2022.

EU Values and Future Digital Initiatives

“The EU certificate is a clear example of digital tools that embody our values,” she said during a speech at the 2021 Digital Assembly. “The EU prioritizes privacy; no personal data will be exchanged or retained. The EU is inclusive; individuals without vaccination can obtain a digital certificate based on test results or recovery. Those lacking a smartphone can receive a paper version. This certificate aims to facilitate safe movement during the pandemic and will be in place for only one year. Europe is a leader in this area and can establish global standards.”

Furthermore, the Commission President announced an upcoming digital proposal to provide Europeans with a secure online identity for interacting with regional governments and businesses, minimizing data sharing.

A New Digital Identity for European Citizens

“We aim to offer Europeans a new digital identity, one that ensures trust and protects users online. Our proposal is forthcoming,” she explained. “It will empower everyone to control their online identity and interact with governments and businesses across the EU. Individuals should not be compelled to share more data than is strictly necessary. For example, booking a hotel room should not require disclosure of one’s origin or social connections. Our proposal offers an alternative to the models of large online platforms, prioritizing a human-centered digital transition.”