eIDAS 2.0, Article 20, SE

Where that provider does not provide a remedy and, where applicable within the time limit set by the supervisory body, the supervisory body, where justified in particular by the extent, duration and consequences of that failure, shall withdraw the qualified status of that provider or of the affected service it provides.

the accreditation of the conformity assessment bodies and for the conformity assessment report referred to in paragraph 1;

the auditing requirements for the conformity assessment bodies to carry out their conformity assessment, including composite assessment, of the qualified trust service providers as referred to in paragraph 1;

the conformity assessment schemes for carrying out the conformity assessment of the qualified trust service providers by the conformity assessment bodies and for the provision of the report referred to in paragraph 1.

Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 48(2).

1. Qualified trust service providers shall be audited at their own expense at least every 24 months by a conformity assessment body. The audit shall confirm that the qualified trust service providers and the qualified trust services provided by them fulfil the requirements laid down in this Regulation and in Article 21 of Directive (EU) 2022/2555. Qualified trust service providers shall submit the resulting conformity assessment report to the supervisory body within three working days of receipt.

1a. Qualified trust service providers shall inform the supervisory body at the latest one month before any planned audits and shall allow the supervisory body to participate as an observer upon request.

1b. Member States shall, without undue delay, notify to the Commission the names, addresses and accreditation details of the conformity assessment bodies referred to in paragraph 1 and any subsequent changes thereto. The Commission shall make that information available to all Member States.

2. Without prejudice to paragraph 1, the supervisory body may at any time audit or request a conformity assessment body to perform a conformity assessment of the qualified trust service providers, at the expense of those trust service providers, to confirm that they and the qualified trust services provided by them fulfil the requirements laid down in this Regulation. Where personal data protection rules appear to have been breached, the supervisory body shall, without undue delay, inform the competent supervisory authorities established pursuant to Article 51 of Regulation (EU) 2016/679.

3. Where the qualified trust service provider fails to fulfil any of the requirements set out by this Regulation, the supervisory body shall require it to provide a remedy within a set time limit, if applicable.

3a. Where the competent authorities designated or established pursuant to Article 8(1) of Directive (EU) 2022/2555 informs the supervisory body that the qualified trust service provider fails to fulfil any of the requirements set out in Article 21 of that Directive, the supervisory body, where justified in particular by the extent, duration and consequences of that failure, shall withdraw the qualified status of that provider or of the affected service that it provides.

3b. Where the supervisory authorities established pursuant to Article 51 of Regulation (EU) 2016/679 informs the supervisory body that the qualified trust service provider fails to fulfil any of the requirements set out in that Regulation, the supervisory body, where justified in particular by the extent, duration and consequences of that failure, shall withdraw the qualified status of that provider or of the affected service it provides.

3c. The supervisory body shall inform the qualified trust service provider of the withdrawal of its qualified status or of the qualified status of the service concerned. The supervisory body shall inform the body notified pursuant to Article 22(3) of this Regulation for the purposes of updating the trusted lists referred to in paragraph 1 of that Article and the competent authority designated or established pursuant to Article 8(1) of Directive (EU) 2022/2555.

4. By 21 May 2025, the Commission shall, by means of implementing acts, establish a list of reference standards and, where necessary, establish specifications and procedures for the following: (a) the accreditation of the conformity assessment bodies and for the conformity assessment report referred to in paragraph 1;

Official source

Version: 08d71766e7cc91ed

SHA-256: sha256:08d71766e7cc91ed7eadab67a2d345a8e70d2c340e7b23864ea69628e5f627fa

• Article 1
• Article 2
• Article 3
• Article 4
• Article 5
• Article 5a
• Article 5b
• Article 5c
• Article 5d
• Article 5e
• Article 5f
• Article 6
• Article 7
• Article 8
• Article 9
• Article 10
• Article 11
• Article 11a
• Article 12
• Article 12a
• Article 12b
• Article 13
• Article 14
• Article 15
• Article 16
• Article 19a
• Article 21
• Article 22
• Article 23
• Article 24
• Article 24a
• Article 25
• Article 26
• Article 27
• Article 28
• Article 29
• Article 29a
• Article 30
• Article 31
• Article 32
• Article 32a
• Article 33
• Article 34
• Article 35
• Article 36
• Article 37
• Article 38
• Article 39
• Article 39a
• Article 40
• Article 40a
• Article 41
• Article 42
• Article 43
• Article 44
• Article 45
• Article 45a
• Article 45b
• Article 45c
• Article 45d
• Article 45e
• Article 45f
• Article 45g
• Article 45h
• Article 45i
• Article 45j
• Article 45k
• Article 45l
• Article 46
• Article 46a
• Article 46b
• Article 46c
• Article 46d
• Article 46e
• Article 47
• Article 48
• Article 48a
• Article 49
• Article 50
• Article 51
• Article 52

Geographical article agents

Source: NovaCopilot