eIDAS 2.0
- Official title
- Regulation (EU) 2024/1183 of the European Parliament and of the Council of 11 April 2024 amending Regulation (EU) No 910/2014 as regards establishing the European Digital Identity Framework
- Reference
- (EU) 2024/1183
- Status
- In force since 20 May 2024. The European Digital Identity Wallet obligations depend on deadlines that run from the implementing acts (see «EUDI Wallet»).
- Who it reaches
- An online store selling through agents is generally not required to accept the wallet. Art. 5f(2) only binds those that must use strong user authentication for online identification because law or contract requires it (the Regulation gives as examples transport, energy, banking, financial services, health or telecommunications), and expressly excludes micro and small enterprises; paragraph 3 reaches very large online platforms. If you choose to accept it, the relying-party rules (registration and data minimisation) do bind you. Qualified seals and time stamps are voluntary: what the law gives is their legal effect.
Dates
- : Published in the Official Journal Official source
- : Entry into force (twentieth day after publication) Official source
- : Computed date: Art. 5f(2) private relying parties must accept the wallet (36 months from the entry into force, on 24-12-2024, of the Art. 5a(23) and 5c(6) implementing acts); the Commission summarises it as «end 2027» Official source
What it means for your store
- Obligation
If you want to rely on the European Digital Identity Wallet (for instance, so the buyer proves identity or age), you must register as a relying party in the Member State where you are established, declaring who you are, how to contact you and which data you will request and why.
Art. 5 ter, apartados 1 y 2 / Art. 5b(1)-(2) · Official source
- Obligation
As a relying party you may not ask the user for data other than what you declared at registration, and you must identify yourself to the user.
Art. 5 ter, apartados 3 y 8 / Art. 5b(3) and (8) · Official source
- Obligation
Only if you are not a micro or small enterprise and law or contract requires strong user authentication for online identification (whatever your sector): you must accept the wallet, upon the user's voluntary request, no later than 36 months after the implementing acts enter into force.
Art. 5 septies, apartado 2 / Art. 5f(2) · Official source
- Obligation
Very large online platforms that require user authentication must accept and facilitate the wallet, upon the user's voluntary request and for the minimum data necessary.
Art. 5 septies, apartado 3 / Art. 5f(3) · Official source
- Legal effect (not an obligation)
An electronic seal or time stamp cannot be denied legal effect or admissibility as evidence for being electronic or non-qualified. If qualified, the seal enjoys the presumption of data integrity and correct origin, and the time stamp the presumption of accurate date and time and of integrity of the data they are bound to.
Arts. 35(1)-(2) y 41(1)-(2) del Reglamento (UE) n.º 910/2014 · Official source
Where to start
- Check whether you fall under Art. 5f(2): does law or contract require strong user authentication for online identification, and are you above small-enterprise size? Unless both hold, the wallet is an option, not a duty.
- Level 6: if you want proof that a person authorised the purchase delegated to the agent, consider the EUDI Wallet as an authentication means; first register as a relying party and request only the attributes you need.
- Level 6: if you issue receipts for agent purchases, sealing them with a qualified seal and a qualified time stamp from a trusted-list provider gives them a legal presumption of integrity, origin and date. The signed receipts and credentials of the linked tools produce the evidence, but are not qualified seals by themselves.
Related levels
Level 5: Trustworthy; Level 6: Verifiable
Related tools
- Verifiable Intent
- Trusteed Trust Receipts Our product
Verified on
All regulation