Commission Implementing Regulation (EU) 2025/1572 of 29 July 2025 laying down rules for the application of Regulation (EU) No 910/2014 of the European Parliament and of the Council as regards the format and procedures for notification of intention and verification with regard to the initiation of qualified trust services
Commission Implementing Regulation (EU) 2025/1572 of 29 July 2025 laying down rules for the application of Regulation (EU) No 910/2014 of the European Parliament and of the Council as regards the format and procedures for notification of intention and verification with regard to the initiation of qualified trust services
Data as of 2026-07-04 · Compiled from an official source version. Later amendments or repeals may not be reflected; the official text prevails. · Read the official text ↗
1. Supervisory bodies shall establish a methodology for verifying compliance of trust service providers having notified their intention to start providing a qualified trust service with the requirements laid down in Regulation (EU) No 910/2014 and Article 21(2) of Directive (EU) 2022/2555 of the European Parliament and of the Council ( 5 ) .
2. The verification methodology shall include procedures and processes for involving competent authorities designated or established pursuant to Article 8(1) of Directive (EU) 2022/2555, which carry out supervisory actions to verify the trust service provider’s compliance with the requirements laid down in Article 21 of Directive (EU) 2022/2555.
Supervisory bodies shall make the following information publicly available:
(1)
contact details of the supervisory body;
(2)
the communication channels to be used when trust service providers submit a notification of the intention to start providing a qualified trust service;
(3)
the list of documentation that trust service providers are to provide as a part of a notification of intention to start providing a qualified trust service;
(4)
the procedures for handling complaints relating to the process of verification of compliance of trust service providers having notified their intention to start providing a qualified trust service with the requirements laid down in Regulation (EU) No 910/2014 and Article 21(2) of Directive (EU) 2022/2555;
(5)
a general description of the methodology referred to in Article 1.
Trust service providers shall provide at least the following information in their notifications of intention to start providing a qualified trust service:
(1)
where the trust service provider is a legal person, its name and, where applicable, a registration number, name of the Member State where it is established and the name of the person(s) signing or submitting the notification on behalf of the legal person;
(2)
where the trust service provider is a natural person, their name and personal identification number, and in the absence thereof their date of birth and the type and number of their identity document;
(3)
the telephone number, email address and postal address of the trust service provider;
(4)
the Uniform Resource Identifiers (URI) where users can obtain additional information concerning that trust service provider, including the practice statements and policies, the general terms and conditions and the customer care policies that apply to the trust service being notified;
(5)
the risk analysis underlying the measures referred to in Article 24(2), point (fa) of Regulation (EU) No 910/2014, and the risk analysis underlying the measures referred to in Article 21 of Directive (EU) 2022/2555;
(6)
each qualified trust service which the trust service provider intends to start providing;
(7)
for each trust service that the trust service provider intends to start providing as a qualified trust service:
—
one or more identifiers and, where applicable, certificates of the trust service, for inclusion in the national trusted list in accordance with the implementing acts adopted pursuant to Article 22(5) of Regulation (EU) No 910/2014;
—
the intended start date of the provision of the trust service;
—
the conformity assessment reports(s) of the trust service and the contact details of the conformity assessment body;
—
where applicable, technical reports supporting the conformity assessment report.
(8)
the termination plan referred to in Article 24(2), point (i) of Regulation (EU) No 910/2014.
1. To determine whether the trust service provider and the qualified trust service it intends to provide comply with the requirements of Regulation (EU) No 910/2014 and Article 21 of Directive (EU) 2022/2555, supervisory bodies shall analyse the trust service provider’s provided information and may, in addition to any measures described in the methodology established pursuant to Article 1, perform on-site verifications, as well as interviews with representatives of the trust service provider and the conformity assessment body.
2. Supervisory bodies shall verify at least the following elements:
(a)
the submitted conformity assessment report sufficiently demonstrates compliance of the trust service provider and the qualified trust service it intends to provide with the requirements set out in Regulation (EU) No 910/2014 and in Article 21 of Directive (EU) 2022/2555;
(b)
the submitted conformity assessment report complies with the requirements set out in the implementing acts adopted pursuant to Article 20(4) of Regulation (EU) No 910/2014;
(c)
any information contained in the submitted conformity assessment report indicating non-conformity with the requirements of Regulation (EU) No 910/2014;
(d)
any additional information considered necessary to verify compliance with the requirements laid down in Regulation (EU) No 910/2014 and in Article 21 of Directive (EU) 2022/2555.
This Regulation shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union .
This Regulation shall apply from 19 August 2026.
