eIDAS 2

No changes recorded yet — we are watching, and nothing has been published.

1. 2027-05-21 in 193 days Signature creation devices certified under Directive 1999/93/EC stop counting as qualified devices (Article 51(1), as amended)
2. 2026-05-21 Qualified trust service providers qualified before 20 May 2024 must have submitted a new conformity assessment report; the Commission's review report is due
3. 2025-11-19 Commission proposes the European Business Wallets regulation, COM(2025) 838, amending Article 5a
4. 2024-12-24 Wallet implementing regulations on core functionalities (2024/2979) and certification (2024/2981) enter into force, starting the 24- and 36-month periods of Articles 5a and 5f
5. 2024-11-28 Commission adopts five implementing regulations on European Digital Identity Wallets

1. 2025-11-19
   Digital Omnibus proposal, COM(2025) 837 Draft

   Commission proposal whose Article 7 would have trust service providers and wallet providers send security notifications through the NIS2 single-entry point. source

   More

   • Not adopted; the European Parliament lists procedure 2025/0360(COD) as awaiting a committee decision.
2. 2025-11-19
   European Business Wallets proposal, COM(2025) 838 Draft

   Commission proposal for European Business Wallets that would amend Article 5a so that EU Digital Identity Wallets are provided to natural persons. source

   More

   • Not adopted; the European Parliament lists procedure 2025/0358(COD) as awaiting Parliament's first-reading position, with interinstitutional negotiations confirmed by plenary on 7 October 2026.
3. 2025-04-09
   Regulation (EU) No 910/2014 as amended by Regulation (EU) 2024/1183 (corrected 2025) ErrataCurrent text

   Corrigendum to Regulation (EU) 2024/1183, for example "unlikeability" read "unlinkability" in Article 5a(16)(b) and corrected cross-references in the delegation article. source

4. 2024-04-11
   Regulation (EU) 2024/1183 (eIDAS 2) Amendment

   Amends Regulation (EU) No 910/2014 to establish the European Digital Identity Framework, published in the Official Journal on 30 April 2024. source

   More

   • It entered into force on 20 May 2024.
   • It adds the European Digital Identity Wallet, new qualified trust services such as electronic attestations of attributes and electronic archiving, and a fine regime for trust service providers.
5. 2014-07-23
   Regulation (EU) No 910/2014 (eIDAS) Major version

   The original eIDAS Regulation on electronic identification and trust services, published in the Official Journal on 28 August 2014. source

   More

   • Most of its provisions have applied since 1 July 2016.

eIDAS 2 obliges Member States to issue identity wallets, sets rules for trust service providers, and makes many public and private services accept the wallets.

Member States

Each Member State must provide at least one European Digital Identity Wallet within 24 months of the entry into force of the implementing acts under Articles 5a(23) and 5c(6) (Article 5a(1)); the Commission says wallets are to be available by the end of 2026. source source

Public sector

Where a Member State requires electronic identification for an online public service, it must also accept the wallets (Article 5f(1)). source

Private relying parties

Private services legally or contractually required to use strong user authentication, in areas such as banking, energy, transport, health and telecoms, must accept the wallets on the user's request no later than 36 months after those implementing acts enter into force; micro and small enterprises are exempt (Article 5f(2)). source

Very large platforms

Very large online platforms that require user authentication must accept the wallets on the user's voluntary request (Article 5f(3)). source

Trust service providers

Qualified and non-qualified trust service providers fall under the security, breach notification and fine rules of the amended Regulation. source

Qualified trust service providers are audited at least every 24 months, and wallets are certified under the scheme set by Implementing Regulation (EU) 2024/2981.

Qualified providers

Audited at their own expense at least every 24 months by a conformity assessment body, covering the Regulation and Article 21 of NIS2 (Article 20(1), as amended). source

Wallet certification

Implementing Regulation (EU) 2024/2981 lays down rules for certifying European Digital Identity Wallets. source

Breach notification

Trust service providers notify the supervisory body and affected individuals of significant security breaches without undue delay and in any event within 24 hours (Article 24, as amended). source

National supervisory bodies enforce the rules, and Member States must allow fines on trust service providers of at least EUR 5 million or 1% of turnover.

National rules

Member States lay down effective, proportionate and dissuasive penalties for infringements, without prejudice to NIS2 Article 31 (Article 16(1), as amended). source

1. Law text Regulation (EU) 2024/1183 (European Digital Identity Framework)
2. Law text Regulation (EU) No 910/2014 (eIDAS)
3. Law text Implementing Regulation (EU) 2024/2979 - integrity and core functionalities of wallets
4. Law text Implementing Regulation (EU) 2024/2981 - certification of wallets
5. Law text Implementing Regulation (EU) 2024/2977 - person identification data and attestations

1. NIST SP 800-63

   US federal digital identity guidelines for agencies, with assurance levels but no wallet obligation or fines.

2. NIS2

   Trust service providers are NIS2 entities too; NIS2 Article 21 risk measures feed into their eIDAS audits.

3. PSD2 SCA

   Strong customer authentication for payments; banks that must use strong authentication are among the private relying parties that must accept the wallets.

Verified against official sources on 18 October 2026. We monitor the official sources for this framework. Watching since 7 September 2026. Subscribe to eIDAS 2 (RSS)