Access to European Union law
<a href="https://eur-lex.europa.eu/content/help/eurlex-content/experimental-features.html" target="_blank">More about the experimental features corner</a>
Choose the experimental features you want to try
EUR-Lex
Access to European Union law

This document is an excerpt from the EUR-Lex website

You are here
Use quotation marks to search for an "exact phrase". Append an asterisk (*) to a search term to find variations of it (transp*, 32019R*). Use a question mark (?) instead of a single character in your search term to find variations of it (ca?e finds case, cane, care).
Search tips
Need more search options? Use the Advanced search

Document 32026R1730

Commission Implementing Regulation (EU) 2026/1730 of 15 July 2026 amending Implementing Regulation (EU) 2025/848 as regards applicable standards and specifications

C/2026/4834

OJ L, 2026/1730, 22.7.2026, ELI: http://data.europa.eu/eli/reg_impl/2026/1730/oj (BG, ES, CS, DA, DE, ET, EL, EN, FR, GA, HR, IT, LV, LT, HU, MT, NL, PL, PT, RO, SK, SL, FI, SV)

Legal status of the document In force

ELI: http://data.europa.eu/eli/reg_impl/2026/1730/oj

European flag

Official Journal
of the European Union

EN

L series

2026/1730

22.7.2026

COMMISSION IMPLEMENTING REGULATION (EU) 2026/1730

of 15 July 2026

amending Implementing Regulation (EU) 2025/848 as regards applicable standards and specifications

THE EUROPEAN COMMISSION,

Having regard to the Treaty on the Functioning of the European Union,

Having regard to Regulation (EU) No 910/2014 of the European Parliament and of the Council of 23 July 2014 on electronic identification and trust services for electronic transactions in the internal market and repealing Directive 1999/93/EC (1), and in particular Article 5b(11) thereof,

Whereas:

(1)

To ensure the highest level of harmonisation among Member States for the development of European Digital Identity Wallets, the technical specifications for the wallets rely on the work carried out on the basis of Commission Recommendation (EU) 2021/946 (2) and in particular the architecture and reference framework. As the architecture and reference framework has evolved significantly since the adoption of Commission Implementing Regulation (EU) 2025/848 (3), Implementing Regulation (EU) 2025/848 should now be amended to align it with the new standards, specifications and procedures. Further, to foster interoperability between wallet-relying party registers, the relevant technical specifications for a common format and application programming interface (API) for wallet-relying party registration information have been developed in the context of the Architecture and Reference Framework.

(2)

In accordance with the objectives of Regulation (EU) No 910/2014, a number of standards have been selected to meet the requirements applicable to the registration of wallet-relying parties. These standards should reflect established practices and be widely recognised within the relevant sectors. Where necessary, these standards should be adapted or complemented in order to ensure a high level of security and reliability in the registration and identification of wallet-relying parties, while facilitating cross-border interoperability and the effective functioning of the internal market. In line with this objective, this Regulation updates the applicable technical standards and information requirements governing the registration of the link between intermediaries and the wallet-relying parties on whose behalf they act and harmonises the certificate profiles for the certificates regulated under this Regulation.

(3)

To enable wallet unit to validate that the data requested by a wallet-relying party are within the scope of the registered intended use, providers of wallet-relying party registration certificates should issue wallet-relying party registration certificates in an automated manner and without undue delay after the registration.

(4)

Regulation (EU) 2016/679 of the European Parliament and of the Council (4) and, where relevant, Directive 2002/58/EC of the European Parliament and of the Council (5) apply to all personal data processing activities under this Regulation.

(5)

The European Data Protection Supervisor was consulted in accordance with Article 42(1) of Regulation (EU) 2018/1725 of the European Parliament and of the Council (6) and delivered its opinion on 17 April 2026 (7).

(6)

The measures provided for in this Regulation are in accordance with the opinion of the committee established by Article 48 of Regulation (EU) No 910/2014,

HAS ADOPTED THIS REGULATION:

Article 1

Amendments to Implementing Regulation (EU) 2025/848

Implementing Regulation (EU) 2025/848 is amended as follows:

(1)

In Article 6(3), point (a) is replaced by the following:

‘(a)

the accuracy, validity, authenticity and integrity of the information required under Annex I, points 1 to 6 and 11 to 16.’;

(2)

In Article 6(3), point (c) is deleted;

(3)

In Article 6, the following paragraph 3a is inserted:

‘3a.   Registrars shall collect the information referred to in Annex I, points 7 to 10 in an automated manner only for the purpose of transparency and, without prejudice to paragraph 4 of Article 5b of Regulation (EU) No 910/2014, shall not apply any preauthorisation process on this information.’

;

(4)

Article 8 is amended as follows:

(a)

paragraph 1 is replaced by the following:

‘1.   Member States shall authorise at least one certificate authority to issue wallet relying party registration certificates. Member States shall ensure that providers of wallet-relying party registration certificates issue those certificates in an automated manner and without undue delay after the registration.’

;

(b)

paragraph 2 is replaced by the following:

‘2.   Member States shall:

(a)

require providers of wallet-relying party registration certificates to issue wallet-relying party registration certificates exclusively to registered wallet-relying parties;

(b)

ensure that each intended use is expressed in the wallet-relying party registration certificates;

(c)

ensure that wallet-relying party registration certificates include a general access policy, being syntactically and semantically harmonised across the Union, informing users that the wallet-relying party is only allowed to request the data specified in the registration certificates for the intended use registered in the registration certificates;

(d)

ensure that providers of wallet solutions established in that Member State comply with the general access policy by informing users when a wallet-relying party requests data that is not specified in the registration certificates;

(e)

implement wallet-relying party registration certificates in a syntactically and semantically harmonised manner and in line with the requirements set out in Annex V;

(f)

implement dedicated certificate policies and certificate practice statements for the wallet-relying party registration certificates in accordance with the requirements set out in Annex V;

(g)

ensure that wallet-relying parties provide a URL to the privacy policy regarding the intended use.’
;

(5)

Annex I is amended as set out in Annex I to this Regulation;

(6)

Annex IV is amended as set out in Annex II to this Regulation;

(7)

Annex V is amended as set out in Annex III to this Regulation.

Article 2

Entry into force

This Regulation shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union.

This Regulation shall be binding in its entirety and directly applicable in all Member States.

Done at Brussels, 15 July 2026.

For the Commission

The President

Ursula VON DER LEYEN

(1)   OJ L 257, 28.8.2014, p. 73, ELI: http://data.europa.eu/eli/reg/2014/910/oj.

(2)  Commission Recommendation (EU) 2021/946 of 3 June 2021 on a common Union Toolbox for a coordinated approach towards a European Digital Identity Framework (OJ L 210, 14.6.2021, p. 51, ELI: http://data.europa.eu/eli/reco/2021/946/oj).

(3)  Commission Implementing Regulation (EU) 2025/848 of 6 May 2025 laying down rules for the application of Regulation (EU) No 910/2014 of the European Parliament and of the Council as regards the registration of wallet-relying parties (OJ L, 2025/848, 7.5.2025, ELI: http://data.europa.eu/eli/reg_impl/2025/848/oj).

(4)  Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.5.2016, p. 1, ELI: http://data.europa.eu/eli/reg/2016/679/oj).

(5)  Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications) (OJ L 201, 31.7.2002, p. 37, ELI: http://data.europa.eu/eli/dir/2002/58/oj).

(6)  Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC (OJ L 295, 21.11.2018, p. 39, ELI: http://data.europa.eu/eli/reg/2018/1725/oj).

(7)   EDPS Formal comments on the draft Implementing Regulation amending Implementing Regulation (EU) 2025/848 as regards applicable standards and specifications. | European Data Protection Supervisor.

ANNEX I

In Annex I of Implementing Regulation (EU) 2025/848, the following point is added:

‘16.

Where applicable, an association to the wallet-relying party that is relying upon the intermediary to whom the wallet-relying party access certificate has been issued and that is acting on behalf of the relying party who intends to rely upon the wallet.’

ANNEX II

Annex IV of Implementing Regulation (EU) 2025/848 is amended as follows:

(1)

point (3), first paragraph is amended as follows:

(a)

The text “shall, as applicable, comply with at least the normalised certificate policy (‘NCP’) requirements as specified in standard ETSI EN 319 411-1 version 1.4.1 (2023-10)” is replaced by the text “shall, as applicable, comply with standard ETSI TS 119 411-8 V1.1.1 (2025-10)”.

(2)

point 3(k) is amended as follows:

(a)

the third indent is replaced by the following:

‘—

the information referred to in Annex I, points 1, 2, 3, 5, 6, 7, (a), (b), (c) and 16;’;

(b)

the following fourth indent is added:

‘—

a reference to the national wallet-relying party register in which the relying party is registered.’.

ANNEX III

Annex V of Implementing Regulation (EU) 2025/848 is amended as follows:

(1)

point (3), first paragraph is amended as follows:

(a)

The text “shall comply with at least the applicable NCP requirements as specified in standard ETSI EN 319 411-1 version 1.4.1 (2023-10)” is replaced by the text “shall comply with ETSI TS 119 475 V1.2.1 (2026-03)”.

(2)

point (3)(j) is amended as follows:

(a)

the fifth indent is replaced by the following:

‘—

to include a general access policy as referred to in Article 8(2)c.’.

ELI: http://data.europa.eu/eli/reg_impl/2026/1730/oj

ISSN 1977-0677 (electronic edition)

Top