National identity cards in the European Economic Area

  EU member, national ID card issued

  EFTA member, national ID card issued

  EU member, passport card issued (Ireland)

  EU member, no national ID card issued (Denmark)

  Accepts EU/EFTA national ID cards

  Accepts some EU/EFTA national ID cards

As an alternative to presenting a passport, EEA and Swiss citizens are entitled to use a valid national identity card as a stand-alone travel document to exercise their right of free movement in the European Economic Area and Switzerland.[18][19][20] National identity card ownership in most EU countries and Switzerland is much more widespread than passport ownership.[24]

When travelling within the Nordic Passport Union, no identity documentation is legally required by Nordic citizens. When travelling within the Common Travel Area, other valid identity documentation (such as a driving licence) is often sufficient for Irish and British citizens.[25]

At present, Denmark and Iceland do not issue identity cards that are valid as travel documents in the EEA member states and Switzerland.[26] Strictly speaking, it is not necessary for an EEA or Swiss citizen to possess a valid national identity card or passport to enter the EEA and Switzerland. In theory, if an EEA or Swiss citizen can prove their nationality by any other means (e.g. by presenting an expired national identity card or passport, or a citizenship certificate), they must be permitted to enter the EEA and Switzerland. An EEA or Swiss citizen who is unable to demonstrate their nationality satisfactorily must, nonetheless, be given 'every reasonable opportunity' to obtain the necessary documents or to have them delivered within a reasonable period of time.[27][28][29]

Additionally, EEA and Swiss citizens can enter the following countries and territories outside the EEA and Switzerland on the strength of their national identity cards alone, without the need to present a passport to the border authorities:

Turkey allows citizens of Belgium, Bulgaria,[47] France, Germany, Greece, Hungary, Italy, Liechtenstein, Luxembourg, Malta, Netherlands, Poland, Portugal, Spain and Switzerland. Egypt allows citizens of Belgium, France, Germany, Italy, and Portugal to enter using a national identity card for short-term visits.[48][49] Tunisia allows nationals of Austria, Belgium, France, Germany, Italy, Luxembourg, Netherlands, Portugal, Spain, Sweden, and Switzerland to enter using a national identity card if travelling on an organized tour. Anguilla, Dominica, Saint Lucia and Jersey allow nationals of France to enter using a national ID card, while Dominica de facto also allows nationals of (at least) Germany and Sweden to enter with a national ID card (as of March 2016). Gambia allows nationals of Belgium to enter using a national ID card.[50] The United Kingdom and the Crown Dependencies only allows EEA (except Irish) and Swiss citizens fulfilling specific requirements to use national identity cards (though to enter at the land border Ireland-Northern Ireland, no specific document requirements apply).[51][52][53][54][55] Greenland allows Nordic citizens to use any identification document containing a photo, while citizens from the rest of EU/EFTA must carry a passport.[56]

Swedish national law did not recognise the card as a valid travel document outside the Schengen Area,[57] in direct violation of European law, until July 2015, when travel to non-Schengen countries in the EU (but not outside, even if the destination country accepts the ID card) was permitted.[58] Similarly, Finnish citizens cannot leave Finland directly for a non-EU/EFTA country with only their ID cards.[59]

At the external border crossing points of the Schengen Area, if a traveller presents a travel document without a machine readable zone and the border guard has 'doubt about his/her identity', the traveller may be requested to undergo a more in-depth 'second line' check.[28] In practice, this means that Greek citizens who present an old-format Greek identity card and Italian citizens who present an Italian paper identity card could be subject to additional checks and delay when entering/leaving the Schengen Area.[60]

With effect from 7 April 2017, it is mandatory for border guards in the Schengen Area to check on a systematic basis the travel documents of all EEA and Swiss citizens crossing external borders against relevant databases.[61] Until 7 April 2017, border guards in the Schengen Area were only obliged to perform a 'rapid' and 'straightforward' visual check for signs of falsification and tampering, and were not obliged to use technical devices – such as document scanners, UV light and magnifiers – when EEA and Swiss citizens presented their passports or national identity cards at external border checkpoints.[62] They were not legally obliged to check the passports/national identity cards of EEA and Swiss citizens against a database of lost/stolen/invalidated travel documents (and, if they did so, they could only perform a 'rapid' and 'straightforward' database check, and could only check to see if the traveller was on a database containing persons of interest on a strictly 'non-systematic' basis where such a threat was 'genuine', 'present' and 'sufficiently serious').[62]

According to statistics published by Frontex, in 2015 the top 6 EU member states whose national identity cards were falsified and detected at external border crossing points of the Schengen Area were Italy, Spain, Belgium, Greece, France and Romania.[63] These countries remained the top 6 in 2016.[64]

Identity documentation requirements for citizens

  National identity card required

  Some form of identity documentation required

  Identity documentation optional

Usage in own country

There are varying rules on domestic usage of identity documents. Some countries demand the usage of the national identity card or a passport. Other countries allow usage of other documents like driver's licences.

In some countries, e.g. Austria, Finland, Sweden and Iceland national identity cards are fully voluntary and not needed by everyone, as identity documents like driving licences are accepted domestically. In these countries only a minority have a national identity card, since a majority have a passport and a driving licence and don't need more identity documents. This is also true for Ireland where those who have a passport and a driving licence have less need for the passport card. The passport card can be used for travel to 31 countries in the European Union, European Economic Area including Switzerland.[65]

However, even in those EEA countries that impose a national identity card requirement on their citizens (above certain age), it is generally not required to carry the identity cards at all times.

Usage outside own country

EEA and Swiss citizens exercising their right of free movement in another EEA member state or Switzerland are entitled to use their national identity card as an identification document when dealing not just with government authorities, but also with private sector service providers. For example, where a supermarket in the Netherlands refuses to accept a German national identity card as proof of age when a German citizen attempts to purchase an age-restricted product and insists on the production of a Dutch-issued passport or driving licence or other identity document, the supermarket would, in effect, be discriminating against this individual on this basis of their nationality in the provision of a service, thereby contravening the prohibition in Art 20(2) of Directive 2006/123/EC of discriminatory treatment relating to the nationality of a service recipient in the conditions of access to a service which are made available to the public at large by a service provider.[66] In those EEA countries whose citizens are required by law to obtain a national identity card, only a minority have a passport, since it is not needed for travelling across much of Europe.

Usage in third countries

National identity cards are often accepted in other parts of the world for unofficial identification purposes (such as age verification in commercial establishments that serve or sell alcohol, or checking in at hotels) and sometimes for official purposes such as proof of identity and nationality to authorities (especially machine-readable cards).

As of 1 July 2021, EEA (except Irish) passports and identity cards are no longer accepted to prove the right to rent in the United Kingdom, so EEA citizens are required to provide evidence of lawful immigration status.[67]

A total of 17 EU countries issue eIDs on their national identity cards, with some being mandatory, others upon request from their user. 14 EU countries issue national identity cards with an electronic identity (eID) function through an EMV (contact chip). 3 EU countries (The Netherlands, Italy and Germany) have a RFID/NFC integration that allows the same eID functions by contactless, without an EMV chip, such as Italy and Germany. The regulation dictates that the eID functions must be logically or physically separate from the ICAO biometric function of the card. [16]

Digital signature applications can be used which, upon activation, enables the bearer to authenticate the card using their confidential PIN.[68] Consequently they can authenticate documents to satisfy any third party that the document's not been altered after being digitally signed, as well as to identify the identity card holder. This application uses a registered certificate in conjunction with public/private key pairs so these enhanced cards do not necessarily have to participate in online transactions.[69] This can be achieved by using an EMV smartcard reader paired with a computer, or by NFC (by mobile phone or PC) for the contactless variants.

On 13 July 2005, the Justice and Home Affairs Council called on all European Union member states to adopt common designs and security features for national identity cards by December 2005, with detailed standards being laid out as soon as possible thereafter.[70]

On 4 December 2006, all European Union member states agreed to adopt the following common designs and minimum security standards for national identity cards that were in the draft resolution of 15 November 2006:[71][72]

The card can be made with paper core that is laminated on both sides or made entirely of a synthetic substrate.

The data on the card shall contain at least: name, birth date, nationality, a photo, signature, card number, and end date of validity.[73] Some cards contain more information such as height, eye colour, start date of validity, sex, issue place or province, and birthplace.

The biographical data on the card is to be machine readable and follow the ICAO specification for machine-readable travel documents.

The EU Regulation revising the Schengen Borders Code (which entered into force on 7 April 2017 and introduced systematic checks of the travel documents of EU, EEA and Swiss citizens against relevant databases when entering and leaving the Schengen Area) states that all member states should phase out travel documents (including national identity cards) which are not machine-readable.[74]

All EEA electronic identity cards should comply with the ISO/IEC standard 14443. Effectively this means that all these cards should implement electromagnetic coupling between the card and the card reader and, if the specifications are followed, are only capable of being read from proximities of less than 0.1 metres.[75]

They are not the same as the RFID tags often seen in stores and attached to livestock. Neither will they work at the relatively large distances typically seen at US toll booths or automated border crossing channels.[76]

The same ICAO specifications adopted by nearly all European passport booklets (Basic Access Control - BAC) means that miscreants should not be able to read these cards[77] unless they also have physical access to the card.[78] BAC authentication keys derive from the three lines of data printed in the MRZ on the obverse of each TD1 format identity card that begins "A", "C", or "I".[79]

According to the ISO 14443 standard, wireless communication with the card reader can not start until the identity card's chip has transmitted a unique identifier. Theoretically an ingenious attacker who has managed to secrete multiple reading devices in a distributed array (eg in arrival hall furniture) could distinguish bearers of MROTDs without having access to the relevant chip files. In concert with other information, this attacker might then be able to produce profiles specific to a particular card and, consequently its bearer. Defence is a trivial task when most electronic cards make new and randomised UIDs during every session [NH08] to preserve a level of privacy more comparable with contact cards than commercial RFID tags.[68]

Regulation 2019/1157

European Union regulation
Text with EEA relevance
Title	Regulation (EU) 2019/1157 of the European Parliament and of the Council of 20 June 2019 on strengthening the security of identity cards of Union citizens and of residence documents issued to Union citizens and their family members exercising their right of free movement
Made by	European Parliament and Council
Made under	Art. 21(2) TFEU
Journal reference	L 188, pp. 67–78
History
Date made	20 June 2019
Came into force	10 July 2019
Applies from	2 August 2021
Preparative texts
Commission proposal	17 April 2018
Current legislation

A new common format of electronic identity document is intended to replace and harmonize the various identity card models currently in use across the European Union (EU) and the European Economic Area (EEA).[lower-alpha 1] In accordance with its own laws, any Member State of the Union shall issue an identity card complying with the requirements of Regulation (EU) 2019/1157 of the European Parliament and of the Council of 20 June 2019 on strengthening the security of identity cards of Union citizens and of residence documents issued to Union citizens and their family members exercising their right of free movement, and articles 3/4/5 state that:[17]

• Identity cards shall be produced in ID-1 format and shall contain a machine-readable zone (MRZ).
• Security standards shall be based on ICAO Document 9303.
• The document shall bear the title 'Identity card' in the official language and in at least one other official language of the institutions of the Union.
• It shall contain the two-letter country code of the Member State issuing the card, printed in negative in a blue rectangle and encircled by 12 yellow stars (EU Flag) on the front side. (Requirement of the EU flag does not apply in Norway, Iceland and Liechenstein)[82]
• It shall include a highly secure storage medium which shall contain a facial image of the holder of the card and two fingerprints in interoperable digital formats. The storage medium shall have sufficient capacity and capability to guarantee the integrity, the authenticity and the confidentiality of the data. The data stored shall be accessible in contactless form and secured as provided for in Implementing Decision (European Union) C(2018) 7767.[83]
• Identity cards shall have a minimum period of validity of 5 years and a maximum period of validity of 10 years. But Member States may provide for a period of validity of less than 5 years for minors and more than 10 years for persons aged 70 and above.
• Identity cards which do not meet the new requirements shall cease to be valid at their expiry or by 3 August 2031.
• Identity cards which do not meet the minimum security standards or which do not include a functional MRZ shall cease to be valid at their expiry or by 3 August 2026.
• Identity cards of persons aged 70 and above at 2 August 2021, which meet the minimum security standards and which have a functional MRZ shall cease to be valid at their expiry.

Article 16 states that this Regulation shall apply from 2 August 2021.

• Examples of the new design standard
• 
  Austrian identity card
• 
  Belgian identity card
• 
  Dutch identity card
• 
  Spanish identity card

For several member countries the new requirements do not mean that the design or features of the existing cards change much, since they mostly fulfil the requirements already. For some this means a large redesign. A visible change for all countries is the country code inside the EU flag.

Identity cards not meeting the new requirements shall cease to be valid at their expiry or by 3 August 2031, whichever comes sooner. Identity cards which do not meet the minimum security standards or which do not include a functional machine-readable zone shall cease to be valid by 3 August 2026. Identity cards of persons aged 70 and above on 2 August 2021 which meet the minimum security standards and which have a functional MRZ shall cease to be valid at their expiry.[84] In 2019, the EU estimated that around 80 million ID cards in circulation were not machine-readable, and will therefore expire in 2026.[85]

In addition, the new EU Regulation cannot be applied to travel documents like the passport card issued by Ireland, as stated at point (14) of the introduction chapter.[86]

Implementation throughout the member states is ongoing with various timetables on a per-country basis. Cyprus began issuing identity cards conforming to the harmonised requirements as early as August 2020, becoming the first country to implement the new standard, followed by Malta the same month.[87][13][88]

In July 2023, the European Commission decided to open an infringement procedure on Bulgaria, Greece and Portugal as they have not updated their ID cards to the EU standard.[89] Greece has since released their updated ID card in September 2023. [90]

Therefore the only cards registered as national identity cards that remain non-compliant as of October 2023 are Bulgaria and Portugal.

Iceland is not yet bound (and therefore did not receive an infringement notice) as the regulation has not come into force in the EEA agreement, however a new law on Icelandic identity cards was passed and new EU-standard cards are due in December 2023. [91][92][93] The old-format Icelandic national identity card has never been a valid national identity document outside the Nordic countries, and its obscurity and lack of security meant that it was never a practical travel document. They were only written in Icelandic and did not have expiration dates, document numbers or explicit dates of birth (only displayed within the national ID no.). They did however always contain information about nationality, indicated by (e.g. "RF.IS" for Ríkisfang Ísland, meaning Citizenship: Icelandic).

Danish identity cards are issued by municipalities which have their own designs, and are not considered travel documuments valid for use outside Denmark. From 2018, information about the nationality of the cardholder was included. This briefly allowed the card to be used for travel into Sweden, but in September 2019 Swedish authorities explicitly bannad Danish municipal identity cards for entry into Sweden.[94]