This panel will explore how privacy regulations, cybersecurity standards and financial rules interact within digital transaction ecosystems. By 2026, the rollout of Europe’s EU Digital Identity (EUDI) Wallet under the eIDAS 2.0 framework will transform how individuals prove identity and how financial and digital services verify and protect it. As these trusted identity systems merge with payment infrastructures, new intersections arise between cybersecurity, privacy, and financial regulation and new questions emerge about who is responsible when things go wrong.  

One part of the discussion will examine how cybersecurity, privacy, and financial liability frameworks intersect in the four-party model, and the other will dive into the new regulatory and business realities of biometric identity in the wallet era. Together, the session will lay out how responsibility is distributed in case of data misuse, security breaches, or systemic failures, and how biometric-based identity proofs introduce new layers of both opportunity and risk. 

Panellists will explore:
·         how the General Data Protection Regulation (GDPR), NIS2 Directive, and Digital Operational Resilience Act (DORA) interact with eIDAS 2.0 and wallet-based identity systems;
·         lawful bases and compliance design for biometric processing and selective disclosure of attributes;
·         the allocation of liability and trust among issuers, relying parties and technology providers; and
·         how digital identities enable passwordless access, reduce fraud and transform onboarding.

Bringing together regulators, policymakers and industry leaders, this session will bridge financial regulation and digital identity innovation, highlighting both regulatory gaps and emerging business opportunities in the future of secure digital transactions.