This document is an excerpt from the EUR-Lex website
Regulation (EU) 2021/953 on the EU digital COVID certificate
It establishes the European Union (EU) digital COVID certificate, which is a harmonised framework for proof of COVID-19 vaccination, test or recovery. The certificate is designed to:
The framework covers how the following certificates are issued, accepted and verified.
Member States issue separate certificates for each vaccination dose, test result or recovery, with the following characteristics:
The certificates only include a limited amount of necessary information, which cannot be retained by verifiers. For verification purposes, only the validity and authenticity of the certificate is checked, by verifying the digital signature of the issuing authority stored in the QR code.
Certificate signatures can be verified across the EU.
Where a Member State accepts proof of vaccination, testing or recovery to waive certain free movement restrictions, they are obliged to accept the EU certificates issued by other Member States under the same conditions.
For the purpose of travel within the EU, vaccination certificates issued after completion of the primary vaccination cycle are valid for 270 days. Member States should only accept certificates if no more than 270 days have passed since the last dose. This acceptance period is limited to persons aged 18 and above. Certificates issued for booster doses do not have a maximum validity. Recovery certificates expire at the latest 180 days after the positive test result. Test certificates do not state an expiry date.
Amending Commission Implementing Decision (EU) 2022/483 enhances the trust framework by supporting the bilateral exchange of certificate cancellation lists between Member States where certificates have been issued erroneously, as a result of fraud or following the suspension of a COVID-19 vaccine batch found to be defective.
Possession of the certificate must not:
Cross-border passenger transport service operators that are required by national law to implement certain public health measures during the COVID-19 pandemic may verify – but not retain – the information in the certificates. They should also integrate the certificate system into their operations at airports, ports and railway and bus stations.
A separate recommendation adopted by the Council of the European Union covers the question of easing the restrictions on free movement within the EU. The basic principle is that anyone exercising their right of free movement who has a valid EU digital COVID certificate should not be subject to additional restrictions, such as further tests, save for exceptional situations. However, as the recommendation is non-binding, each Member State has some discretion in how to apply it. Therefore, while every Member State has to accept the certificate as valid proof, there is some variation in the consequences for the holders.
The domestic use of COVID-19 certificates, such as to regulate access to events, restaurants, sport venues, public transport or the workplace, does not fall within the scope of the EU digital COVID certificate regulation. Member States may indeed use the EU digital COVID certificate for domestic purposes, but are required to provide for a legal basis in national law that must comply with data protection requirements, among other conditions.
Equivalence of COVID-19 certificates with non-EU countries
Where a non-EU country issues interoperable certificates in compliance with the necessary technical standards, the European Commission may adopt implementing decisions (‘equivalence decisions’) establishing that the COVID-19 certificates issued by that country are equivalent to the EU digital COVID certificates.
This results in the non-EU country concerned being connected to the EU digital COVID certificate system. The certificates issued by that country must then be directly accepted under the same conditions as the EU certificates.
So far, the Commission has adopted such decisions regarding the following non-EU countries:
It was initially set to apply for 12 months, from 1 July 2021 until 30 June 2022. However, on 29 June 2022, the European Parliament and the Council adopted an extension of the regulation until 30 June 2023.
As the impact of a possible increase in infections cannot currently be predicted, and also depends on whether or not new variants emerge, the extension will allow people to continue using their certificate to travel across the EU should a rise in infections make it necessary for Member States to temporarily reintroduce travel restrictions during the second half of 2022 and first half of 2023.
However, this extension should not be understood as requiring EU Member States, in particular those that lift domestic public health measures, to maintain or impose free movement restrictions.
Regulation (EU) 2021/954 relates to the EU digital COVID certificate and to non-EU nationals legally staying or residing in the EU.
For further information, see:
Regulation (EU) 2021/953 of the European Parliament and of the Council of 14 June 2021 on a framework for the issuance, verification and acceptance of interoperable COVID-19 vaccination, test and recovery certificates (EU Digital COVID Certificate) to facilitate free movement during the COVID-19 pandemic (OJ L 211, 15.6.2021, pp. 1–22).
Successive amendments to Regulation (EU) 2021/953 have been incorporated in the original text. This consolidated version is of documentary value only.
Regulation (EU) 2022/1035 of the European Parliament and of the Council of 29 June 2022 amending Regulation (EU) 2021/954 on a framework for the issuance, verification and acceptance of interoperable COVID-19 vaccination, test and recovery certificates (EU Digital COVID Certificate) with regard to third-country nationals legally staying or residing in the territories of Member States during the COVID-19 pandemic (OJ L 173, 30.6.2022, pp. 46–49).
Regulation (EU) 2022/1034 of the European Parliament and of the Council of 29 June 2022 amending Regulation (EU) 2021/953 on a framework for the issuance, verification and acceptance of interoperable COVID-19 vaccination, test and recovery certificates (EU Digital COVID Certificate) to facilitate free movement during the COVID-19 pandemic (OJ L 173, 30.6.2022, pp. 37–45).
Commission Delegated Regulation (EU) 2022/503 of 29 March 2022 amending Regulation (EU) 2021/953 of the European Parliament and of the Council as regards exempting minors from the acceptance period of vaccination certificates issued in the EU Digital COVID Certificate format (OJ L 102, 30.3.2022, pp. 8–10).
Commission Implementing Decision (EU) 2022/483 of 21 March 2022 amending Implementing Decision (EU) 2021/1073 laying down technical specifications and rules for the implementation of the trust framework for the EU Digital COVID Certificate established by Regulation (EU) 2021/953 of the European Parliament and of the Council (OJ L 98, 25.3.2022, pp. 84–104).
Commission Delegated Regulation (EU) 2022/256 of 22 February 2022 amending Regulation (EU) 2021/953 of the European Parliament and of the Council as regards the issuance of certificates of recovery based on rapid antigen tests (OJ L 42, 23.2.2022, pp. 4–8).
Council Recommendation (EU) 2022/107 of 25 January 2022 on a coordinated approach to facilitate safe free movement during the COVID-19 pandemic and replacing Recommendation (EU) 2020/1475 (OJ L 18, 27.1.2022, pp. 110–123).
Commission Delegated Regulation (EU) 2021/2288 of 21 December 2021 amending the Annex to Regulation (EU) 2021/953 of the European Parliament and of the Council as regards the acceptance period of vaccination certificates issued in the EU Digital COVID Certificate format indicating the completion of the primary vaccination series (OJ L 458, 22.12.2021, pp. 459–462).
Commission Implementing Decision (EU) 2021/1073 of 28 June 2021 laying down technical specifications and rules for the implementation of the trust framework for the EU Digital COVID Certificate established by Regulation (EU) 2021/953 of the European Parliament and of the Council (OJ L 230, 30.6.2021, pp. 32–53).
See consolidated version.
Regulation (EU) 2021/954 of the European Parliament and of the Council of 14 June 2021 on a framework for the issuance, verification and acceptance of interoperable COVID-19 vaccination, test and recovery certificates (EU Digital COVID Certificate) with regard to third-country nationals legally staying or residing in the territories of Member States during the COVID-19 pandemic (OJ L 211, 15.6.2021, pp. 24–28).
See consolidated version.
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.5.2016, pp. 1–88).
See consolidated version.
Regulation (EU) No 910/2014 of the European Parliament and of the Council of 23 July 2014 on electronic identification and trust services for electronic transactions in the internal market and repealing Directive 1999/93/EC (OJ L 257, 28.8.2014, pp. 73–114).
Directive 2011/24/EU of the European Parliament and of the Council of 9 March 2011 on the application of patients’ rights in cross-border healthcare (OJ L 88, 4.4.2011, pp. 45–65).
See consolidated version.
Directive 2004/38/EC of the European Parliament and of the Council of 29 April 2004 on the right of citizens of the Union and their family members to move and reside freely within the territory of the Member States amending Regulation (EEC) No 1612/68 and repealing Directives 64/221/EEC, 68/360/EEC, 72/194/EEC, 73/148/EEC, 75/34/EEC, 75/35/EEC, 90/364/EEC, 90/365/EEC and 93/96/EEC (OJ L 158, 30.4.2004, pp. 77–123). Text republished in corrigendum (OJ L 229, 29.6.2004, pp. 35–48).
See consolidated version.
last update 07.11.2022