法律人 LawPlayer logo

資料由法律人 LawPlayer整理提供·EU law / curated by LawPlayer from EUR-Lex

Regulation

Commission Implementing Regulation (EU) 2026/248 of 2 February 2026 laying down rules for the application of Regulation (EU) No 910/2014 of the European Parliament and of the Council as regards the formats of advanced electronic signatures and advanced electronic seals to be recognised by public sector bodies and repealing Commission Implementing Decision (EU) 2015/1506

CELEX
Implementing Regulation (EU) 2026/248
Date of document
Articles
8
Source
EUR-Lex
Article 1Advanced electronic signature formats

1.   Member States requiring an advanced electronic signature or an advanced electronic signature based on a qualified certificate in accordance with Article 27(1) and (2) of Regulation (EU) No 910/2014, shall recognise advanced electronic signatures, using formats or associated signature containers, that comply with the technical specifications listed in Annex I to this Regulation.

2.   Member States shall recognise advanced electronic signatures, using formats or associated signature containers, that comply with the technical specifications listed in Annex II to this Regulation, where those electronic signatures were created before 23 February 2028.

Article 2Alternative advanced electronic signature validation methods

1.   Member States requiring an advanced electronic signature or an advanced electronic signature based on a qualified certificate in accordance with Article 27(1) and (2) of Regulation (EU) No 910/2014, shall recognise formats of advanced electronic signatures other than those referred to in Article 1 of this Regulation, where:

(a)

the Member State, in which the trust service provider used by the signatory is established, offers other Member States signature validation methods for those formats; and

(b)

those validation methods shall be carried out in accordance with paragraph 2.

2.   The validation methods for alternative signature formats shall fulfil all the following conditions:

(a)

be, where possible, suitable for automated processing;

(b)

allow other Member States to validate the received electronic signature online, free of charge;

(c)

provide clear, comprehensive, easily understandable and accessible instructions to perform the validation;

(d)

be indicated in the signed document, in the electronic signature or in the electronic document container;

(e)

confirm the validity of an advanced electronic signature provided that:

the certificate supporting the advanced electronic signature was valid at the time of signing,

where the advanced electronic signature is supported by a qualified certificate, the qualified certificate supporting the advanced electronic signature was, at the time of signing, a qualified certificate for electronic signature in compliance with Annex I to Regulation (EU) No 910/2014 and issued by a qualified trust service provider,

the signature validation data corresponds to the data provided to the relying party,

the unique set of data representing the signatory is correctly provided to the relying party,

if a pseudonym was used at the time of signing, the use of any pseudonym is clearly indicated to the relying party,

where the advanced electronic signature is created by a qualified electronic signature creation device, the use of any such device is clearly indicated to the relying party,

the integrity of the signed data has not been compromised,

the requirements set out in Article 26 of Regulation (EU) No 910/2014 were met at the time of signing,

the system used for validating the advanced electronic signature provides to the relying party the correct result of the validation process and allows the relying party to detect any security relevant issues.

3.   The indication referred to in paragraph 2, point (d) shall enable relying parties to easily access the complete specifications of the signature validation method, free of charge.

Article 3Advanced electronic seal formats

1.   Member States requiring an advanced electronic seal or an advanced electronic seal based on a qualified certificate in accordance with Article 37(1) and (2) of Regulation (EU) No 910/2014, shall recognise advanced electronic seals, using formats or using associated seal containers, that comply with the technical specifications listed in Annex I to this Regulation.

2.   Member States shall recognise advanced electronic seals, using formats or using associated seal containers, that comply with the technical specifications listed in Annex II to this Regulation, where those electronic seals were created before 23 February 2028.

Article 4Alternative advanced electronic seal validation methods

1.   Member States requiring an advanced electronic seal or an advanced electronic seal based on a qualified certificate in accordance with Article 37(1) and (2) of Regulation (EU) No 910/2014, shall recognise formats of advanced electronic seals other than those referred to in Article 3 of this Regulation, where:

(a)

the Member State in which the trust service provider used by the creator of the seal is established offers other Member States seal validation methods for those formats; and

(b)

those validation methods shall be carried out in accordance with paragraph 2.

2.   The validation methods for alternative seal formats shall fulfil all the following conditions:

(a)

be, where possible, suitable for automated processing;

(b)

allow other Member States to validate the received electronic seal online, free of charge;

(c)

provide clear, comprehensive, easily understandable and accessible instructions to perform the validation;

(d)

be indicated in the sealed document, in the electronic seal or in the electronic document container; and

(e)

confirm the validity of an advanced electronic seal provided that:

the certificate that supports the advanced electronic seal was valid at the time of sealing,

where the advanced electronic seal is supported by a qualified certificate, the qualified certificate that supports the advanced electronic seal was, at the time of sealing, a qualified certificate for electronic seal in compliance with Annex III to Regulation (EU) No 910/2014 and issued by a qualified trust service provider,

the seal validation data corresponds to the data provided to the relying party,

the unique set of data representing the creator of the seal is correctly provided to the relying party,

if a pseudonym was used at the time of sealing, the use of any pseudonym is clearly indicated to the relying party,

where the advanced electronic seal is created by a qualified electronic seal creation device, the use of any such device is clearly indicated to the relying party,

the integrity of the sealed data has not been compromised,

the requirements set out in Article 36 of Regulation (EU) No 910/2014 were met at the time of sealing, and

the system used for validating the advanced electronic seal provides to the relying party the correct result of the validation process and allows the relying party to detect any security relevant issues.

3.   The indication referred to in paragraph 2, point (d) shall enable relying parties to easily access the complete specifications of the seal validation method, free of charge.

Article 5Repeal

Implementing Decision (EU) 2015/1506 is repealed.

References to the repealed Decision shall be construed as references to this Regulation.

Article 6Entry into force

This Regulation shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union .

Article 1(1) and Article 3(1) shall apply from 23 February 2027.

Schedules & Appendices

ANNEX I

ANNEX I

List of technical specifications for advanced electronic signatures referred to in Article 1(1) and for advanced electronic seals referred to in Article 3(1)

XAdES Baseline Profile

ETSI EN 319 132 -1 V1.3.1 (2024-07)  ( 1 )

CAdES Baseline Profile

ETSI EN 319 122 -1 V1.3.1 (2023-06)  ( 2 )

PAdES Baseline Profile

ETSI EN 319 142 -1 V1.2.1 (2024-01)  ( 3 )

JAdES Baseline Profile

ETSI TS 119 182 -1 V1.2.1 (2024-07)  ( 4 ) , with the following adaptation:

Clause 5.1.8 with title ‘The x5c (X.509 Certificate Chain) header parameter’ is replaced by the following:

‘5.1.8.    The x5c (X.509 Certificate Chain) header parameter

The x5c header parameter as defined in clause 4.1.6 of IETF RFC 7515 [2] shall be present in the JAdES signature, either as a signed or unsigned header parameter.

The x5c header parameter shall have the semantics specified in IETF RFC 7515 [2], clause 4.1.6.

The x5c header parameter shall have the syntax specified in IETF RFC 7515 [2], clause 4.1.6.’

List of technical specifications for associated signature containers referred to in Article 1(1) and for associated seal containers referred to in Article 3(1)

Associated Signature / Seal Container Baseline Profile

ETSI EN 319 162 -1 V1.1.1 (2016-04)  ( 5 )

ETSI EN 319 162 -2 V1.1.1 (2016-04)  ( 6 ) for ASiC-E CAdES additional container as specified in clause 4.3.1.

( 1 )

https://www.etsi.org/deliver/etsi_en/319100_319199/31913201/01.03.01_60/en_31913201v010301p.pdf .

( 2 )

https://www.etsi.org/deliver/etsi_en/319100_319199/31912201/01.03.01_60/en_31912201v010301p.pdf .

( 3 )

https://www.etsi.org/deliver/etsi_en/319100_319199/31914201/01.02.01_60/en_31914201v010201p.pdf .

( 4 )

https://www.etsi.org/deliver/etsi_ts/119100_119199/11918201/01.02.01_60/ts_11918201v010201p.pdf .

( 5 )

https://www.etsi.org/deliver/etsi_en/319100_319199/31916201/01.01.01_60/en_31916201v010101p.pdf .

( 6 )

https://www.etsi.org/deliver/etsi_en/319100_319199/31916202/01.01.01_60/en_31916202v010101p.pdf .

ANNEX II

ANNEX II

List of technical specifications for advanced electronic signatures referred to in Article 1(2) and for advanced electronic seals referred to in Article 3(2)

XAdES Baseline Profile

ETSI TS 103 171 v.2.1.1  ( 1 ) with the exception of clause 9 and at conformance level B-Level, T-Level or LT-Level

CAdES Baseline Profile

ETSI TS 103 173 v.2.2.1  ( 2 ) with the exception of clause 9 and at conformance level B-Level, T-Level or LT-Level

PAdES Baseline Profile

ETSI TS 103 172 v.2.2.2  ( 3 ) with the exception of clause 9 and at conformance level B-Level, T-Level or LT-Level

List of technical specifications for associated signature containers referred to in Article 1(2) and for associated seal containers referred to in Article 3(2)

Associated Signature/Seal Container Baseline Profile

ETSI TS 103 174 v.2.2.1  ( 4 )

( 1 )

http://www.etsi.org/deliver/etsi_ts/103100_103199/103171/02.01.01_60/ts_103171v020101p.pdf .

( 2 )

http://www.etsi.org/deliver/etsi_ts/103100_103199/103173/02.02.01_60/ts_103173v020201p.pdf .

( 3 )

http://www.etsi.org/deliver/etsi_ts/103100_103199/103172/02.02.02_60/ts_103172v020202p.pdf .

( 4 )

http://www.etsi.org/deliver/etsi_ts/103100_103199/103174/02.02.01_60/ts_103174v020201p.pdf .

8 articles

Cite this act

Commission Implementing Regulation (EU) 2026/248 of 2 February 2026 laying down rules for the application of Regulation (EU) No 910/2014 of the European Parliament and of the Council as regards the formats of advanced electronic signatures and advanced electronic seals to be recognised by public sector bodies and repealing Commission Implementing Decision (EU) 2015/1506 (EUR-Lex). Retrieved via LawPlayer, https://lawplayer.com/eu/act/32026R0248

© European Union, https://eur-lex.europa.eu, 1998-2026. Reuse authorised under Commission Decision 2011/833/EU, provided the source is acknowledged.

EU-EurLex-Reuse-2011-833

本頁資料來源:EUR-Lex·整理提供:法律人 LawPlayer· lawplayer.com