Security of identity cards of Union citizens and of residence documents issued to Union citizens and their family members

The European Parliament adopted by 335 votes to 269, with 21 abstentions, a legislative resolution on the proposal for a Regulation of the European Parliament and of the Council on strengthening the security of identity cards of Union citizens and of residence documents issued to Union citizens and their family members exercising their right of free movement.

The European Parliament’s position adopted at first reading under the ordinary legislative procedure amended the Commission proposal as follows:

Security standards/format/specifications

Under the proposed new rules, identity cards shall be produced in a uniform credit card format (ID-1), have a machine-readable zone (MRZ) and comply with the minimum security standards set by ICAO (International Civil Aviation Organisation). The designation of a person's gender shall be optional.

The identity card shall contain, on the front side, the two-letter country code of the Member State issuing the card, printed in negative in a blue rectangle and encircled by 12 yellow stars. It shall include a highly secure storage medium which shall contain a facial image of the holder of the card and two fingerprints in interoperable digital formats. For the capture of biometric identifiers, Member States shall apply the technical specifications as established by Commission Decision C(2018) 7767.

Children under the age of 12 years may be exempt from the requirement to give fingerprints whereas children under the age of 6 years shall be exempt from this.

When necessary and proportionate to the aim to be achieved, Member States may enter such details and observations for national use as may be required in accordance with national law.

Period of validity

Identity cards shall have a minimum period of validity of five years and a maximum period of validity of ten years. Member States may provide for a period of validity of less than five years, for identity cards issued to minors and more than 10 years, for identity cards issued to persons aged 70 and above.

Member States shall issue an identity card having a validity of 12 months or less where it is temporarily physically impossible to take fingerprints of any of the fingers of the applicant.

Phasing out of old cards

Identity cards which do not meet the requirements shall cease to be valid at their expiry or by ten years after the date of application of this Regulation], whichever is earlier. 

Identity cards which do not meet the minimum security standards or which do not include a functional MRZ shall cease to be valid at their expiry or by five years after the date of application of this Regulation, whichever is earlier.

Identity cards of persons aged 70 and above, which meet the minimum security standards and which have a functional MRZ shall cease to be valid at their expiry.

Collection of biometric identifiers

The biometric identifiers shall be collected solely by qualified and duly authorised staff designated by the authorities responsible for issuing identity cards or residence cards, for the purpose of being integrated into the highly secure storage medium.

With a view to ensuring the consistency of biometric identifiers with the identity of the applicant, the applicant shall appear in person at least once during the issuance process for each application.

Member States shall ensure that appropriate and effective procedures for the collection of biometric identifiers are in place and that those procedures comply with the rights and principles set out in the Charter, the Convention for the Protection of Human Rights and Fundamental Freedoms and the United Nations Convention on the Rights of the Child. 

Without prejudice to Regulation (EU) 2016/679, Member States shall ensure the security, integrity, authenticity and confidentiality of the data collected and stored for the purpose of this Regulation.