Agent · eidas-910-2014-24

eIDAS 2.0 artikel 24: Requirements for qualified trust service providers

Operativt tre, håndskrevet ut fra artikkelens vilkår.

CELEX 32014R0910 · 2026-08-26 · Vekt 94 · minimal-risk

PremiumHand written or high weight rule tree. Metered per call at the edge once metering is switched on, at the same address and with the same answer as today.

eIDAS 2.0Offisiell kilde

Inndata

• identity_methodMethod used to identify the applicant for the certificateenum (physical_presence | wallet | notified_eid | qualified_certificate | equivalent_remote | none)
• staff_expertiseStaff have the necessary expertise, reliability and experienceboolean
• liability_coverSufficient financial resources or liability insurance is in placeboolean
• terms_publicTerms are publicly available, including to persons with disabilitiesboolean
• records_keptRecords of services issued and received are retained for the prescribed periodboolean
• termination_planAn up to date termination plan existsboolean
• revocation_capabilityCertificates can be revoked and revocation status is publishedboolean
• incident_reported_24hSignificant incidents are notified to the supervisory body within 24 hoursboolean

Regeltre

1. Hvis: identity_method = none

   Identification of the applicant is missing

   A qualified provider shall verify the identity of the applicant for a qualified certificate before issuing it. Without verification the certificate may not be issued.

   Punkt 1

2. Hvis: identity_method i [physical_presence, wallet, notified_eid, qualified_certificate, equivalent_remote]

   The identification method falls within the article's list

   Identification may be by physical presence, by a European Digital Identity Wallet, by a notified electronic identification means at assurance level high, by a qualified certificate, or by other methods providing equivalent assurance confirmed by a conformity assessment body.

   Punkt 1 a, 1 b, 1 c, 1 d

3. Hvis: inte(staff_expertise = true)

   The staff competence requirement is not met

   The provider shall employ staff and, where applicable, subcontractors with the necessary expertise, reliability, experience and training.

   Punkt 2 b

4. Hvis: inte(liability_cover = true)

   Liability cover is insufficient

   The provider shall maintain sufficient financial resources or an appropriate liability insurance to cover the risk of liability for damages.

   Punkt 2 c

5. Hvis: inte(terms_public = true)

   Terms are not accessible

   The terms, including any limitations on use, shall be communicated before a contract is entered into and be made available in a clear and comprehensible manner, including to persons with disabilities.

   Punkt 2 d

6. Hvis: inte(records_kept = true)

   Record keeping is insufficient

   The provider shall record and keep accessible all relevant information on data issued and received for the period required, including after activities cease, so that the data can serve as evidence.

   Punkt 2 h

7. Hvis: inte(termination_plan = true)

   Termination plan is missing

   The provider shall have an up to date termination plan ensuring continuity of service should the activity cease.

   Punkt 2 i

8. Hvis: inte(revocation_capability = true)

   Revocation cannot be handled

   The provider shall be able to revoke a qualified certificate and make revocation status available, including after expiry for certificates with a validity period.

   Punkt 3, 4

9. Hvis: alla(staff_expertise = true, liability_cover = true, terms_public = true, records_kept = true, termination_plan = true, revocation_capability = true, incident_reported_24h = true)

   The checked requirements on a qualified provider are met

   Staffing, liability cover, terms, record keeping, termination plan, revocation and incident reporting are stated as met. Supervision under Article 20 continues to apply.

   Punkt 2, 3, 4

Hvis ingen regel treffer: None of the article's conditions are met with the facts supplied. Supply more facts or read the article in full.

Artikkelteksten som ble lest

1. 1by means of the European Digital Identity Wallet or a notified electronic identification means which meets the requirements set out in Article 8 with regard to assurance level high;
2. 2by means of a certificate of a qualified electronic signature or of a qualified electronic seal, issued in compliance with point (a), (c) or (d);
3. 3by using other identification methods which ensure the identification of the person with a high level of confidence, the conformity of which shall be confirmed by a conformity assessment body;
4. 4through the physical presence of the natural person or of an authorised representative of the legal person, by means of appropriate evidence and procedures, in accordance with national law.
5. 5by means of the European Digital Identity Wallet or a notified electronic identification means which meets the requirements set out in Article 8 with regard to assurance level high;
6. 6by means of a certificate of a qualified electronic signature or of a qualified electronic seal, issued in accordance with paragraph 1a, point (a), (c) or (d);
7. 7by means of a qualified electronic attestation of attributes;
8. 8by using other methods, which ensure the verification of the attributes with a high level of confidence, the conformity of which shall be confirmed by a conformity assessment body;
9. 9by means of the physical presence of the natural person or of an authorised representative of the legal person, by means of appropriate evidence and procedures, in accordance with national law.
10. 10inform the supervisory body at least one month before implementing any change in the provision of its qualified trust services or at least three months in case of an intention to cease those activities;
11. 11employ staff and, if applicable, subcontractors who possess the necessary expertise, reliability, experience, and qualifications and who have received appropriate training regarding security and personal data protection rules and shall apply administrative and management procedures which correspond to European or international standards;
12. 12with regard to the risk of liability for damages in accordance with Article 13, maintain sufficient financial resources and/or obtain appropriate liability insurance, in accordance with national law;
13. 13before entering into a contractual relationship, inform, in a clear, comprehensive and easily accessible manner, in a publicly accessible space and individually any person seeking to use a qualified trust service of the precise terms and conditions regarding the use of that service, including any limitations on its use;
14. 14use trustworthy systems and products that are protected against modification and ensure the technical security and reliability of the processes supported by them, including using suitable cryptographic techniques;

Ingen rådgivning. Deterministisk regeluppslagning. Ingen juridisk rådgivning, inget efterlevnadsbeslut, ingen bedömning av ett enskilt ärende.

Sitering: 32014R0910 art. 24, Requirements for qualified trust service providers. ExploreWorld Legal, https://legal.exploreworldai.com/agent/eidas-910-2014/artikel-24 (hämtad 2026-08-26, bevis sha256:8ddc7a5475797dff, bygge legal-2026-08-25).