eIDAS 2.0, Article 30, SE

a security evaluation process carried out in accordance with one of the standards for the security assessment of information technology products included in the list established in accordance with the second subparagraph; or

a process other than the process referred to in point (a), provided that it uses comparable security levels and provided that the public or private body referred to in paragraph 1 notifies that process to the Commission. That process may be used only in the absence of standards referred to in point (a) or when a security evaluation process referred to in point (a) is ongoing.

The Commission shall, by means of implementing acts, establish a list of standards for the security assessment of information technology products referred to in point (a). Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 48(2).

1. Conformity of qualified electronic signature creation devices with the requirements laid down in Annex II shall be certified by appropriate public or private bodies designated by Member States.

2. Member States shall notify to the Commission the names and addresses of the public or private body referred to in paragraph 1. The Commission shall make that information available to Member States.

3. The certification referred to in paragraph 1 shall be based on one of the following: (a) a security evaluation process carried out in accordance with one of the standards for the security assessment of information technology products included in the list established in accordance with the second subparagraph; or

3a The validity of a certification referred to in paragraph 1 shall not exceed five years, provided that vulnerabilities assessments are carried out every two years. Where vulnerabilities are identified and not remedied, the certification shall be cancelled.

4. The Commission shall be empowered to adopt delegated acts in accordance with Article 47 concerning the establishment of specific criteria to be met by the designated bodies referred to in paragraph 1 of this Article.

Official source

Version: 3d5f69832d50e91f

SHA-256: sha256:3d5f69832d50e91f538dd7cb9346647fc4a09f9445db4e301b8997047960019f

• Article 1
• Article 2
• Article 3
• Article 4
• Article 5
• Article 5a
• Article 5b
• Article 5c
• Article 5d
• Article 5e
• Article 5f
• Article 6
• Article 7
• Article 8
• Article 9
• Article 10
• Article 11
• Article 11a
• Article 12
• Article 12a
• Article 12b
• Article 13
• Article 14
• Article 15
• Article 16
• Article 19a
• Article 20
• Article 21
• Article 22
• Article 23
• Article 24
• Article 24a
• Article 25
• Article 26
• Article 27
• Article 28
• Article 29
• Article 29a
• Article 31
• Article 32
• Article 32a
• Article 33
• Article 34
• Article 35
• Article 36
• Article 37
• Article 38
• Article 39
• Article 39a
• Article 40
• Article 40a
• Article 41
• Article 42
• Article 43
• Article 44
• Article 45
• Article 45a
• Article 45b
• Article 45c
• Article 45d
• Article 45e
• Article 45f
• Article 45g
• Article 45h
• Article 45i
• Article 45j
• Article 45k
• Article 45l
• Article 46
• Article 46a
• Article 46b
• Article 46c
• Article 46d
• Article 46e
• Article 47
• Article 48
• Article 48a
• Article 49
• Article 50
• Article 51
• Article 52

Geographical article agents

Source: NovaCopilot