eIDAS 2.0, Article 5c, EU
1. The conformity of European Digital Identity Wallets and the electronic identification scheme under which they are provided with the requirements laid down in Article 5a(4), (5), (8), the requirement for logical separation laid down in Article 5a(14) and, where applicable, with the standards and technical specifications referred to in Article 5a(24), shall be certified by conformity assessment bodies designated by Member States.
2. Certification of the conformity of European Digital Identity Wallets with requirements referred to in paragraph 1 of this Article, or parts thereof, that are relevant for cybersecurity shall be carried out in accordance with European cybersecurity certification schemes adopted pursuant to Regulation (EU) 2019/881 of the European Parliament and of the Council ( 4 ) and referred to in the implementing acts referred to in paragraph 6 of this Article.
3. For requirements referred to in paragraph 1 of this Article that are not relevant for cybersecurity, and, for requirements referred to in paragraph 1 of this Article that are relevant for cybersecurity, to the extent that cybersecurity certification schemes as referred to in paragraph 2 of this Article do not, or only partially, cover those cybersecurity requirements, also for those requirements, Member States shall establish national certification schemes following the requirements set out in the implementing acts referred to in paragraph 6 of this Article. Member States shall transmit their draft national certification schemes to the European Digital Identity Cooperation Group established pursuant to Article 46e(1) (the ‘Cooperation Group’). The Cooperation Group may issue opinions and recommendations.
4. Certification pursuant to paragraph 1 shall be valid for up to five years, provided that a vulnerability assessment is carried out every two years. Where a vulnerability is identified and not remedied in a timely manner, certification shall be cancelled.
5. Compliance with the requirements set out in Article 5a of this Regulation related to the personal data processing operations may be certified pursuant to Regulation(EU) 2016/679.
6. By 21 November 2024, the Commission shall, by means of implementing acts, establish a list of reference standards and, where necessary, establish specifications and procedures for the certification of European Digital Identity Wallets referred to in paragraph 1, 2 and 3 of this Article. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 48(2).
7. Member States shall communicate to the Commission the names and addresses of the conformity assessment bodies referred to in paragraph 1. The Commission shall make that information available to all Member States.
8. The Commission shall be empowered to adopt delegated acts in accordance with Article 47 establishing specific criteria to be met by the designated conformity assessment bodies referred to in paragraph 1 of this Article.
Version: da0740e0b5032cc5
SHA-256: sha256:da0740e0b5032cc5303adf8a12ac26c5a765cc2424f6ab3b674fec3ab93662a7
- Article 1
- Article 2
- Article 3
- Article 4
- Article 5
- Article 5a
- Article 5b
- Article 5d
- Article 5e
- Article 5f
- Article 6
- Article 7
- Article 8
- Article 9
- Article 10
- Article 11
- Article 11a
- Article 12
- Article 12a
- Article 12b
- Article 13
- Article 14
- Article 15
- Article 16
- Article 19a
- Article 20
- Article 21
- Article 22
- Article 23
- Article 24
- Article 24a
- Article 25
- Article 26
- Article 27
- Article 28
- Article 29
- Article 29a
- Article 30
- Article 31
- Article 32
- Article 32a
- Article 33
- Article 34
- Article 35
- Article 36
- Article 37
- Article 38
- Article 39
- Article 39a
- Article 40
- Article 40a
- Article 41
- Article 42
- Article 43
- Article 44
- Article 45
- Article 45a
- Article 45b
- Article 45c
- Article 45d
- Article 45e
- Article 45f
- Article 45g
- Article 45h
- Article 45i
- Article 45j
- Article 45k
- Article 45l
- Article 46
- Article 46a
- Article 46b
- Article 46c
- Article 46d
- Article 46e
- Article 47
- Article 48
- Article 48a
- Article 49
- Article 50
- Article 51
- Article 52
Source: NovaCopilot