(1)

The technical and legal framework necessary for the implementation and widespread use of mobile driving licences, in particular ISO/IEC standards 18013-5 and Regulation (EU) No 910/2014 of the European Parliament and of the Council (2), as well as delegated and implementing acts adopted on the basis thereof, is in a highly advanced state. Therefore, the measures provided for in this Regulation should utilise, build upon and coherently coexist with that framework.

(2)

For the purposes of this Regulation, it is necessary to set out further definitions to those in Directive (EU) 2025/2205 which provide the requisite clarity to enable issuers and holders of driving licences to differentiate between the processes and actions necessary for the administrative management of driving licences, in accordance with the requirements of that Directive, and those which are necessary for compliance with the rules on the technical and operational management of mobile driving licences, as established under this Regulation.

(3)

To ensure that they are technically interoperable between issuing authorities, European Digital Identity Wallets (‘Wallets’) and relying parties, all mobile driving licences should comply with a common set of technical specifications. Those specifications should be aligned with the issuance and presentation protocols, as well as attestation formats, supported by Wallets, as regulated and governed, in particular, by Regulation (EU) No 910/2014 and Commission Implementing Regulation (EU) 2024/2982 (3).

(4)

The fulfilment of the technical requirements, as provided for in this Regulation, alone should not entitle a person to hold a mobile driving licence, nor should driving licences be issued by anyone other than the responsible issuing authority or by an entity tasked with issuing driving licences on its behalf, in accordance with the relevant applicable national law and Directive (EU) 2025/2205.

(5)

In addition to the relevant technical specifications applicable for mobile driving licences, such documents should be issued in accordance with the requirements applicable for qualified electronic attestations of attributes, which serve as a state-of-the-art reference point for high-level trustworthiness. Those requirements, amongst others, cover organisational and technical measures, targeted risk assessments, provisioning policies and practices and other relevant protocols with which issuers of mobile driving licences should comply regarding the issuance, operation and management of such licences. In case of qualified trust service providers, compliance with the requirements is to be regularly assessed by independent auditors. Hence, mobile driving licences should be issued as qualified electronic attestations of attributes or electronic attestations of attributes issued by or on behalf of public sector bodies responsible for an authentic source, in accordance with Regulation (EU) No 910/2014.

(6)

In order to ensure the quality and trustworthiness of the information that is presented to verifiers through the mobile driving licence, a general obligation should be established for issuing authorities to ensure that all data contained in a valid mobile driving licence is accurate. This may be done, in particular, by issuing a new mobile driving licence to the holder after receiving information of any change of information to be included in an existing mobile driving licence and, if relevant, by revoking a mobile driving licence which is no longer accurate. Similarly, and in accordance with Article 3(2) of Directive (EU) 2025/2205, issuing authorities should also ensure that the data reported on both a physical and mobile driving licence issued to the same person are fully equivalent as regards the rights and conditions under which that person is authorised to drive, and as to their administrative validity.

(7)

Any processing of personal data for the implementation of this Regulation should comply with the data protection framework of the Union, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (4). Moreover, to reinforce the guarantees already established in Directive (EU) 2022/2555 of the European Parliament and of the Council (5), and in order to ensure that all relevant parties are informed of security incidents affecting the validity or issuance of mobile driving licences in a timely manner, a complementary obligation should be established to ensure that the Commission is notified of such incidents in all cases. Further, given that, in line with this Regulation, mobile driving licences should be issued as qualified electronic attestations of attributes or electronic attestations of attributes issued by or on behalf of public sector bodies, it is not necessary to establish further rules concerning organisational data protection or general security measures to those that this specification itself entails. This is because the framework established for those kinds of electronic attestations of attributes already provides for the desired level of protection of personal data and general security, for example, by requiring issuers of mobile driving licences to guarantee the authenticity, integrity, validity and non-alteration of attributes, to use adequate organisational measures during their operation, to ensure the traceability of data during its lifecycle, and to maintain a security system that complies with all applicable standards.

(8)

To fully harness the inherent trustworthiness of the mobile driving licence as a digital document, verifiers should not rely on visual cues when they are verifying the information presented by the holder. Therefore, a general obligation should be established for verifiers of mobile driving licences to verify the authenticity and validity of mobile driving licences using the technical means of verification provided for in Regulation (EU) No 910/2014. In addition, Member States should also be able to rely on the EU driving licence network set up in accordance with Article 15(1) of Directive 2006/126/EC of the European Parliament and of the Council (6) to verify the authenticity and validity of mobile driving licences, making full use of that network, which explicitly aims to facilitate the recognition and verification of those documents regardless of their format.

(9)

Given that technical verification alone ensures the authenticity and integrity of mobile driving licences, the design of visual elements should remain the responsibility of the designers of Wallets. Notwithstanding, Member States establishing their own toolboxes, design elements, guidance or requirements for the visual appearance of their mobile driving licences should notify the Commission of their content, in order to facilitate interoperability and mutual recognition of such documents. The Commission should make those toolboxes and guidance available to other Member States. The Commission should also publish the visual appearance of mobile driving licences communicated to it by Member States, so as to facilitate their knowledge by the general public.

(10)

To facilitate verification and ensure the interoperability and security of mobile driving licences, certain rules on the validation of such licences should be established, as it is the validation of a mobile driving licence that enables a verifier to check that it is authentic, valid and belongs to the person presenting it. Issuing authorities should therefore be provided with an adequate technical and operational framework to be able to ensure that mobile driving licences and the information contained therein remain valid and accurate. Such a framework should include rules in relation to the administrative and technical validity of mobile driving licences, their expiry and, in the case where the mobile driving licence was issued with a technical validity period longer than an hour, the possibility to revoke it. A mobile driving licence whose technical validity period has expired should not, for that reason alone, lose its administrative validity, as specified in Article 10(2) of Directive (EU) 2025/2205.

(11)

The revocation of a mobile driving licence may be required where necessary to ensure the effective implementation of such licences. In certain cases it should therefore be possible for issuing authorities to revoke mobile driving licences which have a technical validity period longer than an hour, issued by them, including where the wallet unit attestation of a wallet unit to which a mobile driving licence was issued has been revoked, where the driving licence is exchanged or replaced by another Member State or where the right to drive associated to the driving licence is cancelled, withdrawn, suspended or restricted. The entire revocation process, including the update of the revocation or status list to be downloaded by the verifiers, should be concluded as fast as possible, and preferably immediately and automatically, especially where the current mobile driving licence of the holder no longer accurately represents their driving rights, because, for example, the licence is under exchange or confiscation. Revocation should, in itself, not affect the administrative validity of the driving licence and the conditions under which the holder is authorised to drive.

(12)

Annex I, Part C, of Directive (EU) 2025/2205 requires the information transmitted directly from the mobile driving licence stored in the Wallet to allow the competent authorities to determine the driving rights of the holder, including any restrictions applicable in the Union or in the territory of a Member State. In situations involving several Member States, where the driving licence should be immediately confiscated, compliance with this provision could prove difficult without regulated administrative cooperation between the relevant Member States. In particular, as the electronic device that is used to display the mobile driving licence cannot be confiscated from the holder under the same conditions as the physical driving licence, the effects of a confiscation of a driving licence cannot materialise in the case of mobile driving licences without provisions establishing detailed rules on the matter. As this would seriously hinder the effective implementation of Directive (EU) 2025/2205 and the operational interoperability of mobile driving licences and could negatively impact road safety, a dedicated procedure should be established to allow the Member State that intends, on the basis of its national legislation, to confiscate the driving licence to ask the Member State of issuance to include information on such confiscation in the mobile driving licence, while it is in effect on the territory of the requesting Member State. Upon the end of the period of confiscation, the Member State of issuance should ensure that it provides the holder with a mobile driving licence that no longer reflects the information on the confiscation.

(13)

Member States should provide the Commission with information on their issuing authorities of mobile driving licences, so that the Commission can establish a trusted list of trusted issuing authorities, as required by Directive (EU) 2025/2205, which enables verifiers to automatically verify that a mobile driving licence was issued by an authorised issuing authority. The content to be notified to the Commission should conform to a minimum set of relevant information. Further, any changes of such information should also be immediately communicated to the Commission.

(14)

In order to prepare the driving licence exchange framework for the introduction of the mobile driving licence, it is necessary to establish standards for the exchange of mobile driving licences that ensure operational interoperability, technical seamlessness and procedural security. Those rules should strike a balance between the need to uphold the ‘one holder, one licence’ principle, as set out in Article 10(5) of Directive (EU) 2025/2205, which ensures that a driving licence that is exchanged cannot be accessed or used together with the newly acquired driving licence, and the justified expectation of holders of driving licences to acquire their new driving licence as fast as possible. A detailed procedure should therefore be put in place that accounts for all possible scenarios as regards the formats in which the holder can hold and exchange a driving licence, and which ensures seamless and swift cooperation between the exchanging Member State and the previous Member State of issuance.

(15)

Similarly, mobile driving licences issued by third countries may also be subject to exchange by the Member States. It is therefore necessary to define procedures to be complied with when the holders of such mobile driving licences wish to exchange them in the Union, which should, as far as technically possible, make the exchange of those mobile driving licences feasible and secure, thereby improving the procedural security of such exchanges and improving the general interoperability of mobile driving licences. Those procedures should not only promote the cross-border use of mobile driving licences but also, ensure that mobile driving licences correspond to their physical counterparts. They should also ensure that the holders of driving licences issued by third countries cannot contravene the ‘one holder, one licence’ principle, regardless of the format in which they hold their driving licence.

(16)

The European Data Protection Supervisor was consulted in accordance with Article 42(1) of Regulation (EU) 2018/1725 of the European Parliament and of the Council (7), and delivered its opinion on 13 July 2026.

(17)

The measures provided for in this Regulation are in accordance with the opinion of the Committee referred to in Article 26(1) of Directive (EU) 2025/2205,

(1)

‘mobile security object’ means a data structure within a mobile driving licence that is used to protect the integrity and origin of the data elements of that mobile driving licence;

(2)

‘issuing authority’ means the public administrative body of the Member State of issuance under whose responsibility the mobile driving licence is issued;

(3)

‘technical validity period’ means the period of validity of the mobile security object;

(4)

‘revoke’ means to terminate the validity of the mobile security object of a mobile driving licence.