eIDAS

eIDAS creates a common legal basis for trusted electronic identification and transactions across the European Union. Regulation (EU) No 910/2014 applies to electronic identification schemes notified by Member States and to trust services offered in the internal market.¹ It does not require every private service to accept every national identity system; its central cross-border mechanism concerns public-sector online services and notified electronic-identification schemes.

The framework covers electronic signatures, electronic seals, time stamps, electronic registered-delivery services, website-authentication certificates and the preservation of electronic documents. A Member State must recognize a notified electronic-identification means from another Member State when the applicable conditions are met, allowing, for example, a person identified through one national system to access a public service in another country.²

eIDAS is a regulation rather than a directive, so it applies directly throughout the EU while leaving national authorities room to organize their identity systems and supervisory structures.

eIDAS distinguishes ordinary, advanced and qualified electronic signatures according to their assurance and technical requirements. An electronic signature can be any electronic data attached to or logically associated with other data and used for signing; an advanced signature must be uniquely linked to and capable of identifying the signatory, remain under the signatory’s control, and detect later alteration.¹

A qualified electronic signature is an advanced signature created by a qualified device and based on a qualified certificate issued by a qualified trust-service provider. It has the same legal effect as a handwritten signature throughout the EU.³ Qualified status is therefore a legal and assurance category, not simply a synonym for a scanned signature or a password-protected document.

Electronic seals normally identify a legal person rather than an individual and support authenticity and integrity of documents or data. Qualified time stamps and qualified electronic registered delivery provide stronger evidentiary presumptions concerning time, origin and integrity than their non-qualified counterparts.

Trust in eIDAS services depends on supervised providers, qualified certificates and public trust lists. Each Member State designates a supervisory body, and qualified trust-service providers are subject to conformity assessment and continuing oversight; the European Commission publishes national trusted lists so relying parties can determine which providers and services have qualified status.⁴

The regulation is technologically neutral, but implementation relies on technical standards developed through European standardization work, including profiles for signature formats, certificates and trust lists. A document may therefore be signed with different software or cryptographic hardware while remaining interoperable if the relevant legal and technical requirements are met.

Not every electronic transaction needs a qualified service. Businesses commonly use lower-assurance signatures for routine workflows, while regulated filings, procurement, financial processes and cross-border public administration may require stronger evidence. eIDAS also preserves national rules on contracts, employment and sector-specific formalities where the regulation does not harmonize them.

The 2024 amendment broadens eIDAS from mutual recognition of national schemes toward a European Digital Identity framework. Regulation (EU) 2024/1183 provides for European Digital Identity Wallets through which users can identify themselves and share person-identification data or electronic attestations of attributes, such as qualifications, under a common framework.⁵

A notable distinction is between identification and trust services: proving who a person is is not the same legal function as signing a document, sealing data or delivering a message. The framework also addresses website authentication, an easily overlooked service intended to help users verify the identity of a website operator rather than merely encrypt a connection.

Another specialized feature is the qualified electronic archiving service, introduced in the amended framework to support the preservation of electronic data and documents with assurances about integrity and origin. eIDAS consequently operates across identity, cryptography, organizational supervision and evidence law, rather than being only a digital-signature statute.

Electronic identification

The process of using electronic identification data to identify a person, legal person or natural person representing a legal person.

Trust service

An electronic service involving activities such as signatures, seals, time stamps, registered delivery or website authentication.

Qualified electronic signature

An advanced electronic signature created by a qualified device and based on a qualified certificate; it has the legal effect of a handwritten signature in the EU.

Qualified trust-service provider

A provider granted qualified status under eIDAS and subject to supervisory and conformity-assessment requirements.

European Digital Identity Wallet

A regulated digital wallet intended to let users identify themselves and present verified identity data or attributes across the EU.