Kommisjonens gjennomføringsforordning (EU) 2025/1945 av 29. september 2025 om fastsettelse av regler for anvendelse av europaparlaments- og rådsforordning (EU) nr. 910/2014 med hensyn til validering av kvalifiserte elektroniske signaturer og av kvalifiserte elektroniske segl og validering av avanserte elektroniske signaturer basert på kvalifiserte sertifikater og av avanserte elektroniske segl basert på kvalifiserte sertifikater
eIDAS-forordningen: validering av kvalifiserte elektroniske signaturer og segl
Kommisjonsforordning publisert i EU-tidende 30.9.2025
Tidligere
- Utkast til forordning lagt fram av Kommisjonen 15.4.2025 med tilbakemeldingsfrist 13.5.2025
Bakgrunn
(fra kommisjonsforordningen)
(1) Qualified electronic signatures, qualified electronic seals, advanced electronic signatures based on qualified certificates for electronic signatures and advanced electronic seals based on qualified certificates for electronic seals, provided their validity can be confirmed, ensure to relying parties the integrity and authenticity of the signed or sealed data, and enhance the certainty regarding the identity of the signatory or the seal creator. Those electronic signatures and seals play a crucial role in the digital business environment by promoting the transition from traditional paper-based processes to electronic equivalent ones.
(2) The presumption of compliance laid down in Article 32(1), Article 40, Article 32a(3) and Article 40a of Regulation (EU) No 910/2014 should apply where the processes for the validation of qualified electronic signatures, of qualified electronic seals, of advanced electronic signatures based on qualified certificates for electronic signatures and of advanced electronic seals based on qualified certificates for electronic seals comply with the technical standards set out in this Regulation. These standards should reflect established practices and be widely recognised within the relevant sectors. They should be adapted to include additional controls ensuring the ability to verify the technical validity of those signatures and seals, and, where applicable, their qualified status.
(3) The Commission regularly assesses new technologies, practices, standards or technical specifications. In accordance with recital 75 of Regulation (EU) 2024/1183 of the European Parliament and of the Council (2), the Commission should review and update this Regulation, if necessary, to keep it in line with global developments, new technologies, standards or technical specifications and to follow the best practices on the internal market.
(4) Regulation (EU) 2016/679 of the European Parliament and of the Council (3) and, where relevant, Directive 2002/58/EC of the European Parliament and of the Council (4) apply to all personal data processing activities under this Regulation.
(5) The European Data Protection Supervisor was consulted in accordance with Article 42(1) of Regulation (EU) 2018/1725 of the European Parliament and of the Council (5) and delivered its opinion on 6 June 2025.
(6) The measures provided for in this Regulation are in accordance with the opinion of the committee established by Article 48 of Regulation (EU) No 910/2014,