Sign in Subscribe
European Union

European Commission Regulation on Qualified Trust Services: Key Requirements and Timeframes

Strategic Insights

— 1 min read

The European Commission has introduced a regulation (EU) 2025/1572, laying down rules for the application of Regulation (EU) No 910/2014 on electronic identification and trust services for electronic transactions. The regulation aims to ensure the interoperability and security of qualified trust services within the European Union. Trust service providers must notify their intention to start providing a qualified trust service and submit a conformity assessment report, which will be verified by the supervisory body.

Key Takeaways:

  • Trust service providers must notify their intention to start providing a qualified trust service, including a conformity assessment report issued by a conformity assessment body.
  • The supervisory body will verify the trust service provider's compliance with the requirements laid down in Regulation (EU) No 910/2014 and Article 21(2) of Directive (EU) 2022/2555.
  • Trust service providers must provide detailed information in their notifications, including contact details, risk analysis, and information about the qualified trust services they intend to provide.
  • Supervisory bodies must make publicly available information about the verification process, including the communication channels, documentation required, and procedures for handling complaints.
  • The regulation will apply from 19 August 2026, and trust service providers must comply with the requirements within this timeframe.

Statistics:

  • The regulation will enter into force 20 days after its publication in the Official Journal of the European Union (29 July 2025).
  • The regulation will apply from 19 August 2026.
  • Trust service providers have a transitional period of 12 months to comply with the requirements of the regulation.

Sources:

  • COMMISSION IMPLEMENTING REGULATION (EU) 2025/1572 of 29 July 2025 laying down rules for the application of Regulation (EU) No 910/2014 of the European Parliament and of the Council as regards the format and procedures for notification of intention and verification with regard to the initiation of qualified trust services
  • Regulation (EU) No 910/2014 of the European Parliament and of the Council of 23 July 2014 on electronic identification and trust services for electronic transactions in the internal market and repealing Directive 1999/93/EC
  • Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022 on measures for a high common level of cybersecurity across the Union, amending Regulation (EU) No 910/2014 and Directive (EU) 2018/1972, and repealing Directive (EU) 2016/1148

Read more