Kommisjonens gjennomføringsforordning (EU) 2024/2980 av 28. november 2024 om fastsettelse av regler for anvendelsen av europaparlaments- og rådsforordning (EU) nr. 910/2014 med hensyn til meldinger til Kommisjonen vedrørende økosystemet for lommebok for europeisk digital identitet (European Digital Identity Wallets)
eID digital lommebok: tillitsrammer
Kommisjonsforordning publisert i EU-tidende 4.12.2024
Tidligere
- Utkast til forordning lagt fram av Kommisjonen 12.8.2024 med tilbakemeldingsfrist 9.9.2024
Bakgrunn
BAKGRUNN (fra kommisjonsforordningen)
(1) The European Digital Identity Framework established by Regulation (EU) No 910/2014 is a crucial component in the establishment of a secure and interoperable digital identity ecosystem across the Union. With the European Digital Identity Wallets (‘wallets’) being the cornerstone of the framework, it aims at facilitating access to services across Member States, while ensuring the protection of personal data and privacy.
(2) Regulation (EU) 2016/679 of the European Parliament and of the Council (2), or Regulation (EU) 2018/1725 of the European Parliament and of the Council (3) and, where relevant, Directive 2002/58/EC of the European Parliament and of the Council (4) apply to all personal data processing activities under this Regulation.
(3) Article 5a(23) of Regulation (EU) No 910/2014 mandates the Commission, where necessary, to establish relevant specifications and procedures. This is achieved by means of four Implementing Regulations, dealing with protocols and interfaces: Commission Implementing Regulation (EU) 2024/2982 (5), integrity and core functionalities: Commission Implementing Regulation (EU) 2024/2979 (6), person identification data and electronic attestation of attributes: Commission Implementing Regulation (EU) 2024/2977 (7), as well as the notifications to the Commission: Commission Implementing Regulation (EU) 2024/2980 (8). This Regulation lays down the relevant requirements for Member States’ notifications of trusted entities that establish trustworthiness of the European Digital Identity Framework.
(4) The Commission regularly assesses new technologies, practices, standards or technical specifications. To ensure the highest level of harmonisation among Member States for the development and certification of the wallets, the technical specifications set out in this Regulation rely on the work carried out on the basis of Commission Recommendation (EU) 2021/946 of 3 June 2021 on a common Union Toolbox for a coordinated approach towards a European Digital Framework (9) and in particular the architecture and reference framework. In accordance with Recital 75 of Regulation (EU) 2024/1183 of the European Parliament and of the Council (10), the Commission should review and update this Implementing Regulation, if necessary, to keep it in line with global developments, the architecture and reference framework, and to follow the best practices on the internal market.
(5) To meet the objective of establishing a transparent and reliable source of information for authenticating entities in the European Digital Identity Wallet ecosystem, such as wallet providers, providers of person identification data and wallet-relying parties, Member States should notify the required information to the electronic system provided by the Commission. In line with the approach taken by Commission Implementing Decision (EU) 2015/1984 (11) defining the circumstances, formats and procedures of notification with respect to electronic identification schemes applicable to electronic identification means, information should be provided by the Member States to the Commission in English. In this manner, descriptions of electronic identification schemes are available in English for all such schemes, irrespective of whether they relate to electronic identification means or to wallets.
(6) For the same objective of establishing information sources that enable the authentication of entities in the European Digital Identity Wallet ecosystem, the Commission should establish an infrastructure to make the information available to the public in a secure, human-readable, clear, and easily accessible manner, as well as in an electronically signed or sealed form suitable for automated processing, including by offering an application programming interface.
(7) The European Data Protection Supervisor was consulted in accordance with Article 42(1) of Regulation (EU) 2018/1725, and delivered its opinion on 30 September 2024.
(8) The measures provided for in this Regulation are in accordance with the opinion of the Committee referred to in Article 48 of Regulation (EU) No 910/2014,