Amendments to Implementing Regulation (EU) 2024/2979
Article 2
Implementing Regulation (EU) 2024/2979 is amended as follows: (1) in Article 3, paragraph 2 is deleted; (2) in Article 5, paragraph 1, point (a) is replaced by the following: ‘(a) perform wallet cryptographic operations involving critical assets, stored in a wallet secure cryptographic device and not required for the authentication of the wallet user only in cases where those applications have successfully authenticated wallet users;’; (3) the following Article 5a is inserted: ‘Article 5a Cryptographic mechanisms Wallet providers shall, for the purposes of paragraph 2 of Article 4, use only the cryptographic mechanisms referred to in Annex Ia.’ ; (4) Article 6 is amended as follows: (a) paragraph 1 is replaced by the following: ‘1. Wallet providers shall issue wallet unit attestations for each wallet unit. Wallet providers shall sign or seal the wallet unit attestations in a way that the signatures or seals can be validated by means of a certificate listed in accordance with Annex II section 2, point (1), letter (h) of Implementing Regulation (EU) 2024/2980.’ ; (b) paragraph 2 is replaced by the following: ‘2. Wallet providers shall ensure that the wallet unit attestations referred to in paragraph 1 comply with the technical specifications set out in Annex Ib.’ ; (c) in paragraph 3, point (b) is replaced by the following: ‘(b) provide secure identification and authentication mechanisms for wallet users that are independent of wallet units’; (5) in Article 9, paragraph 2, point (b) is replaced by the following: ‘(b) the name, contact details, and the unique identifier of the corresponding wallet-relying party and the Member State in which that wallet-relying party is established;’; (6) in Article 10, paragraph 1 is replaced by the following: ‘1. Wallet providers shall ensure that electronic attestations of attributes issued in accordance with the technical specifications applicable for common embedded disclosure policies set out in Annex III can be processed by the wallet units that they provide.’ ; (7) Article 12 is amended as follows: (a) paragraph 2, point (c) is replaced by the following: ‘(c) creating signatures or seals in accordance with at least the mandatory signature or seal format referred to in Annex IV;’; (b) paragraph 3 is replaced by the following: ‘3. The signature creation applications may either be integrated into or be external to wallet instances.’ ; (c) the following paragraph is inserted: ‘4. The signature creation applications used by wallet units shall support at least the application programming interface referred to in Annex IV.’ ; (8) in Article 14, paragraph 1 is deleted; (9) the following Article 14a is inserted: ‘Article 14a EU Digital Identity Wallet Trust Mark 1. Wallet providers shall ensure that wallet units display the EU Digital Identity Wallet Trust Mark. The EU Digital Identity Wallet Trust Mark shall be in the form set out in Annexes VI and VII. 2. Wallet providers shall ensure that wallet units enable wallet users to access information allowing them to verify the certification status of the wallet solution. For that purpose, wallet providers shall ensure that, following the registration of a wallet solution, the corresponding wallet units include the URLs provided by the European Commission for such verification. Wallet providers shall ensure that their wallet units have access to EU Digital Identity Wallet Trust Mark data that comply with the technical specifications set out in Annex VIII. 3. The reference colours for the EU Digital Identity Wallet Trust Mark shall be Pantone No 661 and 116, or blue (100 % cyan + 67 % magenta + 0 % yellow + 40 % black) and yellow (0 % cyan + 20 % magenta + 100 % yellow + 0 % black), when a four colour process is used; when RGB colours are used the reference colours shall be blue (0 red + 51 green + 153 blue) and yellow (255 red + 204 green + 0 blue). 4. Only where the use of colour is not practicable, the EU Digital Identity Wallet Trust Mark may be used in black and white as set out in Annex VII. 5. Where the EU Digital Identity Wallet Trust Mark is used on a dark background, it may be used in negative format using the same background colour. Where the EU Digital Identity Wallet Trust Mark is used in colour on a coloured background that makes it difficult to see it, a delimiting outer line around the EU Digital Identity Wallet Trust Mark may be used to improve contrast with the background colours. 6. The EU Digital Identity Wallet Trust Mark shall have a minimum size of 64 × 85 pixels at 150 dpi. 7. Wallet providers shall ensure that the EU Digital Identity Wallet Trust Mark is used in a manner enabling the clear indication of the wallet unit that the EU Digital Identity Wallet Trust Mark pertains to. The EU Digital Identity Wallet Trust Mark may be associated with graphic or textual elements clearly indicating the wallet unit it is used for, provided that they do not change its recognisability as an EU Digital Identity Wallet Trust Mark, nor alter the association with the list of certified European Digital Identity Wallets referred to in Article 5d of Regulation (EU) No 910/2014. 8. Where wallet providers have revoked a wallet unit attestation, they shall ensure that the EU Digital Identity Wallet Trust Mark is no longer displayed by the corresponding wallet unit.’ . (10) Annexes Ia and Ib are added as set out in Annex II and Annex III to this Regulation. (11) Annex II is replaced by Annex IV to this Regulation. (12) Annex III is replaced by Annex V to this Regulation. (13) Annex IV is amended in accordance with Annex VI to this Regulation. (14) Annex V is deleted. (15) The text set out in Annex VII to this Regulation is inserted as Annex VI. (16) The text set out in Annex VIII to this Regulation is inserted as Annex VII. (17) The text set out in Annex IX to this Regulation is inserted as Annex VIII.