Skip to main content

Legal basis

The certification documents cite the EU legal instruments below. For each instrument you see which requirement catalogues name it as their legal basis and how many requirements cite it in their text. The links go to the official text on EUR-Lex.

The documents also refer to Dutch national law that is not yet available: NL-SYS-01 and NL-TL contain a placeholder for references to national law, including the admission conditions for wallet providers.

eIDAS​

Regulation (EU) No 910/2014 on electronic identification and trust services (as amended by Regulation (EU) 2024/1183). Read on EUR-Lex

eIDAS 2 (amending)​

Regulation (EU) 2024/1183 amending Regulation (EU) No 910/2014 as regards establishing the European Digital Identity Framework. Read on EUR-Lex

  • Cited in the text of the scheme documents.

CIR 2024/2977​

Commission Implementing Regulation (EU) 2024/2977 - person identification data and electronic attestations of attributes issued to EUDI Wallets. Read on EUR-Lex

CIR 2024/2979​

Commission Implementing Regulation (EU) 2024/2979 - integrity and core functionalities of EUDI Wallets. Read on EUR-Lex

CIR 2024/2980​

Commission Implementing Regulation (EU) 2024/2980 - notifications to the Commission concerning the EUDI Wallet ecosystem. Read on EUR-Lex

  • Cited in the text of the scheme documents.

CIR 2024/2981​

Commission Implementing Regulation (EU) 2024/2981 - certification of EUDI Wallets. Read on EUR-Lex

CIR 2024/2982​

Commission Implementing Regulation (EU) 2024/2982 - protocols and interfaces to be supported by the European Digital Identity Framework. Read on EUR-Lex

CIR 2025/848​

Commission Implementing Regulation (EU) 2025/848 - registration of wallet-relying parties. Read on EUR-Lex

  • Cited in the text of the scheme documents.

CIR 2025/849​

Commission Implementing Regulation (EU) 2025/849 - submission of information on certified EUDI Wallets to the Commission and the Cooperation Group. Read on EUR-Lex

  • Cited in the text of the scheme documents.

CIR 2026/798​

Commission Implementing Regulation (EU) 2026/798 - reference standards and specifications for the remote onboarding of users. Read on EUR-Lex

  • Cited in the text of the scheme documents.

CIR 2026/1731​

Commission Implementing Regulation (EU) 2026/1731 amending Regulations (EU) 2024/2977, 2024/2979, 2024/2980 and 2024/2982 (updated standards and specifications). Read on EUR-Lex

  • Cited in the text of the scheme documents.

CIR 2015/1502​

Commission Implementing Regulation (EU) 2015/1502 - minimum technical specifications and procedures for assurance levels for electronic identification means. Read on EUR-Lex

CIR 2024/2690​

Commission Implementing Regulation (EU) 2024/2690 - technical and methodological requirements of cybersecurity risk-management measures (NIS2) for certain entities. Read on EUR-Lex

NIS2​

Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union (NIS2). Read on EUR-Lex

CRA​

Regulation (EU) 2024/2847 on horizontal cybersecurity requirements for products with digital elements (Cyber Resilience Act). Read on EUR-Lex

Cybersecurity Act​

Regulation (EU) 2019/881 (Cybersecurity Act). Read on EUR-Lex

  • Cited in the text of the scheme documents.

EUCC​

Commission Implementing Regulation (EU) 2024/482 - European Common Criteria-based cybersecurity certification scheme (EUCC). Read on EUR-Lex

Accreditation Regulation​

Regulation (EC) No 765/2008 setting out the requirements for accreditation. Read on EUR-Lex

  • Cited in the text of the scheme documents.

GDPR​

Regulation (EU) 2016/679 (General Data Protection Regulation). Read on EUR-Lex

  • Cited by requirements in: NL-P-04W (1)