Commission Implementing Regulation (EU) 2025/1569of 29 July 2025laying down rules for the application of Regulation (EU) No 910/2014 of the European Parliament and of the Council as regards qualified electronic attestations of attributes and electronic attestations of attributes provided by or on behalf of a public sector body responsible for an authentic source

Article 6 to 9 shall apply from 19 August 2026.

This Regulation shall be binding in its entirety and directly applicable in all Member States.

Done at Brussels, 29 July 2025.

For the Commission

The President

Ursula von der Leyen

Annex

ANNEX I

List of reference standards and specifications referred to in Article 3

Providers of qualified electronic attestations of attributes and providers of electronic attestation of attributes issued by or on behalf of a public sector body responsible for an authentic source shall issue their attestations to natural or legal persons according to the specifications for trust service providers established in standard ETSI EN 319 401 v3.1.1 (2024-06) (ETSI EN 319 401).

Annex

ANNEX II

Technical specifications for the issuance of qualified electronic attestations of attributes and electronic attestations of attributes issued by or on behalf of a public sector body responsible for an authentic source referred to in Article 3

(1) Providers of qualified electronic attestations of attributes and providers of electronic attestation of attributes issued by or on behalf of a public sector body responsible for an authentic source shall issue their attestations in a format according to one of the standards listed in Annex II of Commission Implementing Regulation (EU) 2024/2979

Commission Implementing Regulation (EU) 2024/2979 of 28 November 2024 laying down rules for the application of Regulation (EU) No 910/2014 of the European Parliament and of the Council as regards the integrity and core functionalities of European Digital Identity Wallets (OJ L, 2024/2979, 4.12.2024, ELI: http://data.europa.eu/eli/reg_impl/2024/2979/oj).

.

(2) For the issuance of attestations to natural or legal persons, providers of qualified electronic attestation of attributes and providers of electronic attestation of attributes issued by or on behalf of a public sector body responsible for an authentic source shall:

(a) where applicable, verify that the requester of the attestation has the right to act on behalf of the person that is the subject of the attestation;

(b) where applicable, verify the identity of the authentic source used as a source for the attributes included in the attestation;

(c) process only the minimum set of attributes necessary for the issuance and management of the attestation.

(3) In addition, where the attestation is issued to a European Digital Identity Wallet, the attestation provider shall:

(a) authenticate to the wallet unit;

(b) verify that the wallet unit is not revoked or suspended.

Annex

ANNEX III

Notifications referred to in Article 5

Member States shall notify to the Commission at least:

(1) the name of the public sector body, and where applicable, the registration number as used in official records; the Member State in which the public sector body is established; the Union or national law under which the public sector body is established as the responsible for the authentic source on the basis of which the electronic attestation of attributes is issued or is designated to act on behalf of the public sector body that is responsible for the authentic source;