(fra kommisjonsforordningen)

(1) Supervisory bodies for the European Digital Identity Wallets designated pursuant to Article 46a(1) of Regulation (EU) No 910/2014 and supervisory bodies for trust services designated pursuant to Article 46b(1) of that Regulation (‘supervisory bodies’) are to provide relevant information on their supervisory activities to the Commission pursuant to Article 46a(6) and Article 46b(6) of that Regulation.

(2) To establish a transparent and reliable source of information regarding the supervisory activities of the supervisory bodies, to ensure that data exchanges with the Commission are secure and verifiable, and to reduce administrative complexity, supervisory bodies should submit the annual reports in a specified format which is machine-readable and suitable for automated processing.

(3) To facilitate the exchange of good practices between supervisory bodies and to ensure consistent and efficient supervision in all Member States, it is essential that the annual reports of supervisory bodies contain comprehensive and relevant information. In particular, supervisory bodies should report on their activities entailing elements that could enhance cooperation, including, among others, details on conducted and intended supervisory activities, identified challenges, inspections, any significant security breach or loss of integrity notifications made by the supervisory body to the competent authorities of the Member State concerned pursuant to Directive (EU) 2022/2555 of the European Parliament and of the Council (2), and assistance among supervisory bodies pursuant to Articles 46c and 46d of Regulation (EU) No 910/2014. Moreover, since this information in the annual reports is to be made available to the European Parliament and the Council pursuant to Articles 46a(6) and 46b(6) of Regulation (EU) No 910/2014, the information to be provided would serve the purpose of transparency and accessibility of information. Therefore, all supervisory bodies should submit the information as set out in Annexes I and II to this Regulation.

(4) Regulation (EU) 2016/679 of the European Parliament and of the Council (3) and, where relevant, Regulation (EU) 2018/1725 of the European Parliament and of the Council (4) and Directive 2002/58/EC of the European Parliament and of the Council (5) apply to all personal data processing activities under this Regulation.

(5) The European Data Protection Supervisor was consulted in accordance with Article 42(1) of Regulation (EU) 2018/1725 and delivered its opinion on 28 May 2025.

(6) The measures provided for in this Regulation are in accordance with the opinion of the committee established by Article 48 of Regulation (EU) No 910/2014,