eIDAS Regulation

What is eIDAS Regulation?

The eIDAS Regulation (Electronic Identification, Authentication and Trust Services) is an EU regulation adopted in 2014 that sets the legal framework for electronic identification and trust services for electronic transactions within the European Union. It replaced the earlier Electronic Signatures Directive (1999/93/EC) and, as a regulation rather than a directive, applies directly in all EU member states without requiring national transposition.

eIDAS defines three levels of electronic signatures — simple, advanced, and qualified — each with increasing requirements for security and identity assurance. It also covers electronic seals (used by legal entities rather than natural persons), electronic timestamps, electronic delivery services, and website authentication certificates.

A key principle of eIDAS is mutual recognition: a qualified electronic signature created in one EU member state must be recognized as a qualified electronic signature in all other member states. This cross-border recognition is essential for the functioning of the EU Digital Single Market and enables organizations to conduct business electronically across borders with legal certainty.

The regulation also established a framework of qualified trust service providers (QTSPs) — organizations that are audited and supervised by national authorities to provide trust services such as issuing qualified certificates. An updated version, eIDAS 2.0, was adopted in 2024 to introduce the European Digital Identity Wallet, further expanding the scope of electronic identification across the EU.