Commission Implementing Decision (EU) 2016/650 of 25 April 2016 laying down standards for the security assessment of qualified signature and seal creation devices pursuant to Articles 30(3) and 39(2) of Regulation (EU) No 910/2014 of the European Parliament and of the Council on electronic identification and trust services for electronic transactions in the internal market (Text with EEA relevance)

Implementing Decision (EU) 2016/650 · Decision · 4 articles

Data as of 2026-07-04 · Compiled from an official source version. Later amendments or repeals may not be reflected; the official text prevails. · Read the official text ↗

Article 1

1. The standards for the security assessment of information technology products that apply to the certification of qualified electronic signature creation devices or qualified electronic seal creation devices according to point (a) of Article 30(3) or 39(2) of Regulation (EU) No 910/2014, where the electronic signature creation data or electronic seal creation data is held in an entirely but not necessarily exclusively user-managed environment are listed in the Annex to this Decision. 2. Until the establishment by the Commission of a list of standards for the security assessment of information technology products that apply to the certification of qualified electronic signature creation devices or qualified electronic seal creation devices, where a qualified trust service provider manages the electronic signature creation data or electronic seal creation data on behalf of a signatory or of a creator of a seal, the certification of such products shall be based on a process that, pursuant to Article 30(3)(b), uses security levels comparable to those required by Article 30(3)(a) and that is notified to the Commission by the public or private body referred to in paragraph 1 of Article 30 of Regulation (EU) No 910/2014.

Article 2

Decision 2003/511/EC is hereby repealed.

Article 3

This Decision shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union .

Supplementary provisions

ANNEXSupplementary provisions

ANNEX LIST OF STANDARDS REFERRED TO IN ARTICLE 1(1) — ISO/IEC 15408 — Information technology — Security techniques — Evaluation criteria for IT security, Parts 1 to 3 as listed below: — ISO/IEC 15408-1:2009 — Information technology — Security techniques — Evaluation criteria for IT security — Part 1. ISO, 2009. — ISO/IEC 15408-2:2008 — Information technology — Security techniques — Evaluation criteria for IT security — Part 2. ISO, 2008. — ISO/IEC 15408-3:2008 — Information technology — Security techniques — Evaluation criteria for IT security — Part 3. ISO, 2008, and — ISO/IEC 18045:2008: Information technology — Security techniques — Methodology for IT security evaluation, and — EN 419 211 — Protection profiles for secure signature creation device, Parts 1 to 6 — as appropriate — as listed below: — EN 419211-1:2014 — Protection profiles for secure signature creation device — Part 1: Overview — EN 419211-2:2013 — Protection profiles for secure signature creation device — Part 2: Device with key generation — EN 419211-3:2013 — Protection profiles for secure signature creation device — Part 3: Device with key import — EN 419211-4:2013 — Protection profiles for secure signature creation device — Part 4: Extension for device with key generation and trusted channel to certificate generation application — EN 419211-5:2013 — Protection profiles for secure signature creation device — Part 5: Extension for device with key generation and trusted channel to signature creation application — EN 419211-6:2014 — Protection profiles for secure signature creation device — Part 6: Extension for device with key import and trusted channel to signature creation application

Other acts of the same type

Council Decision (EU) 2016/2310 of 17 October 2016 on the position to be taken on behalf of the European Union within the Association Council set up by the Euro-Mediterranean Agreement establishing an Association between the European Communities and their Member States, of the one part, and the Hashemite Kingdom of Jordan, of the other part, as regards the adoption of EU-Jordan Partnership Priorities, including the Compact Commission Implementing Decision of 14 October 2016 on the publication in the Official Journal of the European Union of the single document referred to in Article 94(1)(d) of Regulation (EU) No 1308/2013 of the European Parliament and of the Council and of the reference to the publication of the product specification for a name in the wine sector (Bürgstadter Berg (PDO))Commission Implementing Decision (EU) 2016/1861 of 14 October 2016 on amending Implementing Decision 2012/830/EU on an additional financial contribution towards Member States' fisheries control, inspection and surveillance programmes for 2012 (notified under document C(2016) 6477)Commission Decision (EU) 2016/1945 of 14 October 2016 on equivalences between categories of driving licences (notified under document C(2016) 6517) (Text with EEA relevance )Council Decision (EU) 2016/1838 of 13 October 2016 on guidelines for the employment policies of the Member States for 2016 Council Decision (EU) 2016/1859 of 13 October 2016 on the Tripartite Social Summit for Growth and Employment and repealing Decision 2003/174/EC Council Decision (EU) 2016/1876 of 13 October 2016 on the position to be adopted on behalf of the European Union within the Association Committee in Trade configuration established by the Association Agreement between the European Union and the European Atomic Energy Community and their Member States, of the one part, and the Republic of Moldova, of the other Commission Implementing Decision (EU) 2016/1819 of 12 October 2016 on amending Implementing Decision 2012/294/EU on a Union financial contribution towards Member States' fisheries control, inspection and surveillance programmes for 2012 (notified under document C(2016) 6466)Council Decision of 11 October 2016 adopting the Council’s position on draft amending budget No 3 of the European Union for the financial year 2016 Council Decision (EU) 2016/1830 of 11 October 2016 on the conclusion, on behalf of the European Union, of the Amending Protocol to the Agreement between the European Community and the Principality of Monaco providing for measures equivalent to those laid down in Council Directive 2003/48/EC Council Implementing Decision (EU) 2016/1837 of 11 October 2016 authorising the Republic of Poland to continue to apply measures derogating from point (a) of Article 26(1) and Article 168 of Directive 2006/112/EC on the common system of value added tax Decision (EU) 2016/1856 of the European Parliament and of the Council of 11 October 2016 on the mobilisation of the European Union Solidarity Fund to provide assistance to Greece

Source: EUR-Lex (Publications Office of the EU), © European Union, reuse permitted under Commission Decision 2011/833/EU.

What to look at next

Browse all EU Legal ActsEvery instrument by type and year, full text free to read section by sectionEuropean Union legislation EU Legal Acts by type and yearGrouped by instrument type and year of enactment, so you can find others of the same kindBrowse by type and year European Union: what this database coversWhich datasets are here, which official source they come from, and how current they areEuropean Union overview