(1)

Where trust service providers intend to start providing a qualified trust service, they are to notify the supervisory body of their intention together with a conformity assessment report issued by a conformity assessment body confirming the fulfilment of the requirements laid down in Regulation (EU) No 910/2014. The supervisory body is to verify whether the trust service provider and the trust services provided by it comply with the requirements laid down in that Regulation. Where the supervisory body concludes that the trust service provider and the trust services provided by it comply with those requirements, the supervisory body is to grant qualified status to the trust service provider and the trust services it provides. To that end, supervisory bodies should make publicly available information about how trust service providers are to notify their intention of becoming a qualified trust service provider. To ensure that qualified trust service providers operate on equal terms in the Union, it is necessary that supervisory bodies verify the same type of information about trust service providers and in the same way.

(2)

Supervisory bodies should be transparent about how they process the information that trust service providers include in their notifications. The supervisory bodies should therefore draw up and make publicly available a description outlining how they verify whether the trust service provider complies with the relevant requirements.

(3)

The Regulation should apply from 12 months after its entry into force to ensure an adequate transitional period for Member States to be able to comply with the requirements of this Regulation by making the necessary adjustments as regards notifications to the supervisory bodies. Such adjustments may include updating national laws, organisational guidelines, and national information systems.

(4)

Regulation (EU) 2016/679 of the European Parliament and of the Council (2) and, where relevant, Directive 2002/58/EC of the European Parliament and of the Council (3) apply to the personal data processing activities under this Regulation.

(5)

The European Data Protection Supervisor was consulted in accordance with Article 42(1) of Regulation (EU) 2018/1725 of the European Parliament and of the Council (4) and delivered its opinion on 6 June 2025.

(6)

The measures provided for in this Regulation are in accordance with the opinion of the committee established by Article 48 of Regulation (EU) No 910/2014,

(1)

contact details of the supervisory body;

(2)

the communication channels to be used when trust service providers submit a notification of the intention to start providing a qualified trust service;

(3)

the list of documentation that trust service providers are to provide as a part of a notification of intention to start providing a qualified trust service;

(4)

the procedures for handling complaints relating to the process of verification of compliance of trust service providers having notified their intention to start providing a qualified trust service with the requirements laid down in Regulation (EU) No 910/2014 and Article 21(2) of Directive (EU) 2022/2555;

(5)

a general description of the methodology referred to in Article 1.

(1)

where the trust service provider is a legal person, its name and, where applicable, a registration number, name of the Member State where it is established and the name of the person(s) signing or submitting the notification on behalf of the legal person;

(2)

where the trust service provider is a natural person, their name and personal identification number, and in the absence thereof their date of birth and the type and number of their identity document;

(3)

the telephone number, email address and postal address of the trust service provider;

(4)

the Uniform Resource Identifiers (URI) where users can obtain additional information concerning that trust service provider, including the practice statements and policies, the general terms and conditions and the customer care policies that apply to the trust service being notified;

(5)

the risk analysis underlying the measures referred to in Article 24(2), point (fa) of Regulation (EU) No 910/2014, and the risk analysis underlying the measures referred to in Article 21 of Directive (EU) 2022/2555;

(6)

each qualified trust service which the trust service provider intends to start providing;

(7)

for each trust service that the trust service provider intends to start providing as a qualified trust service:

(8)

the termination plan referred to in Article 24(2), point (i) of Regulation (EU) No 910/2014.