Withdrawal of wallets
Article 8
1. If a security breach or compromise having led to the suspension of the provision and the use of a wallet solution is not remedied within three months after the date of suspension of the provision and the use of that wallet solution, the Member State providing that wallet solution shall ensure the affected wallet solution is withdrawn and its validity is revoked, without undue delay and in any event within 72 hours after the period of three months has expired. 2. When a Member State withdraws a wallet solution, it shall ensure that: (a) the wallet unit attestations of the wallet unit of the affected wallet solution are revoked; (b) the wallet unit attestations cannot revert to a valid state; (c) no new wallet unit attestation can be issued to existing wallet units provided under the affected wallet solution; (d) no new wallet unit can be provided under the affected wallet solution. 3. The measures set out in paragraphs 1 and 2 shall not hinder affected wallet users from exercising their right to data portability set out in Article 5a(4) point (g) of Regulation (EU) No 910/2014. This is under the condition that this right may be exercised by wallet users without impairing the security of the critical assets of the affected wallet units, in particular considering the reasons for withdrawal and the need to ensure the effective protection of those assets against misuse.