Why eIDAS 2? The texts involved

6 min read Level: Beginner Verified on 2026-10-29 Reviewed on 2026-10-31

Step 1 / 7

In short

The reference text is Regulation 910/2014 as amended, in particular by Regulation 2024/1183 of 23 July 2014. Commission implementing acts supplement it: standards, procedures, formats Art. 5a(23). Depending on the act, a standard may be made mandatory, or compliance with it may give rise to a presumption of conformity Art. 8 Art. 19a(2). Recommendation 2021/946 recommended the development of a common toolbox, from which the ARF originates according to the Commission Member States Expert Groups; the ARF presents itself as informative of 3 June 2021 § 1.3 Purpose, scope and audience.

This page supplements step 1.

The reference text: Regulation 910/2014 as amended

Regulation 2024/1183 is an amending act: it is not read on its own, it changes the text of Regulation 910/2014. The applicable rule is therefore found in Regulation 910/2014 as amended. The consolidated version published on EUR-Lex brings together the original text and its amendments. It lists two amending acts: Directive (EU) 2022/2555, known as NIS2, and Regulation (EU) 2024/1183, as well as one corrigendum to Regulation 2024/1183, published in 2025 of 23 July 2014. A corrigendum corrects an error in a text already published Corrigendum R(02) — Regulation (EU) 2024/1183. The French consolidated version lists three further corrigenda, published in 2025 and 2026, which correct only the French-language text: two concern Regulation 2024/1183 and one concerns Regulation 910/2014 Corrigendum R(03) — Regulation (EU) 2024/1183 Corrigendum R(06) — Regulation (EU) 2024/1183 Corrigendum R(11) — Regulation (EU) No 910/2014.

On this site, the content of the rules is always cited in this consolidated version. Regulation 2024/1183 is used to date an amendment, and its recitals to understand the reasons for it amending Regulation (EU) No 910/2014 as regards establishing the European Digital Identity Framework.

Implementing acts

The regulation sets the obligations; it tasks the Commission with specifying how they are implemented through implementing acts. For example, for the wallet:

Official text · Regulation (EU) No 910/2014 — consolidated version of 18/10/2024, Art. 5a(23)

By 21 November 2024, the Commission shall, by means of implementing acts, establish a list of reference standards and, where necessary, establish specifications and procedures for the requirements referred to in paragraphs 4, 5, 8 and 18 of this Article on the implementation of the European Digital Identity Wallet.

These acts are adopted under the “examination procedure”, which refers to Regulation (EU) No 182/2011 Art. 48(2). According to the Commission, the regulation sets high-level requirements, and the implementing acts set out the technical details: standardised rules, procedures, technical specifications. It states that they are always subject to a public consultation, and that they enter into force twenty days after their publication in the Official Journal What are implementingacts? How are Implementing Acts created?.

A few examples, to give an idea of their variety:

Implementing actSubjectSource
Implementing Regulation 2015/1502Minimum technical specifications and procedures for assurance levels for electronic identification meansArt. 1
Implementing Decision 2015/1505 (consolidated)Technical specifications and formats of trusted listsArt. 1
Implementing Regulation 2024/2977 (consolidated)Issuance of person identification data and attestations to walletsArt. 1
Implementing Regulation 2024/2981Certification of walletsArt. 1
Implementing Regulation 2025/848 (consolidated)Registration of wallet-relying partiesArt. 1
Implementing Regulation 2025/2162Accreditation of the bodies that assess qualified trust service providersImplementing Regulation (EU) 2025/2162

Some acts adopted in 2015 under the original regulation are still in force, such as Implementing Regulation 2015/1502 Implementing Regulation (EU) 2015/1502; Implementing Decision 2015/1505, for its part, was amended by Implementing Decision 2025/2164 of 27 October 2025 of 27 October 2025. Several wallet acts have already been amended, for example by Implementing Regulation 2026/1731 of 15 July 2026 as regards the applicable standards and specifications of 15 July 2026.

Standards

Implementing acts refer to technical standards in at least two ways.

  • The standard is imposed. For example, Implementing Regulation 2024/2979 requires wallet providers to ensure that their solutions support person identification data and attestations issued in accordance with the list of standards in its Annex II Art. 8 Annex II.
  • The standard gives rise to a presumption of conformity. For non-qualified providers, for example, the regulation provides for reference standards and states:
Official text · Regulation (EU) No 910/2014 — consolidated version of 18/10/2024, Art. 19a(2)

Compliance with the requirements laid down in this Article shall be presumed where those standards, specifications and procedures are met.

In this second case, the requirement is the regulation’s; the standard is a recognised way of demonstrating compliance with it. Step 3 gives examples: the wallet, timeline and specifications.

Supporting documents

Commission Recommendation 2021/946 invites Member States to develop a common toolbox to implement the European Digital Identity Framework § 3. COOPERATION AT UNION LEVEL TO DEVELOP A TOOLBOX TO SUPPORT THE IMPLEMENTATION OF THE EUROPEAN DIGITAL IDENTITY FRAMEWORK. According to its recitals, this toolbox is to lead to a technical architecture and reference framework, a set of common standards and technical references, and best practices on a common Union Toolbox for a coordinated approach towards a European Digital Identity Framework.

According to the Commission, the main output of this work is the ARF (Architecture and Reference Framework) Member States Expert Groups, of which this site cites version 3.0.0 ARF 3.0.0 ch. 1. It presents itself as informative: only the regulation and its implementing and delegated acts are mandatory § 1.3 Purpose, scope and audience.

The Commission’s pages and frequently asked questions explain the framework; they do not change it. On this site, what they say is always attributed to the Commission.

The regulation refers to other Union texts, which one comes across as soon as one goes into the details:

TextLink with eIDASSource
GDPR, Regulation (EU) 2016/679eIDAS applies without prejudice to the GDPRArt. 2(4)
NIS2 Directive, (EU) 2022/2555The audit of qualified providers also checks the cybersecurity risk-management measures it provides forArt. 20(1) Art. 21
Regulation (EC) No 765/2008It defines conformity assessment bodies and their accreditationArt. 3(18) Art. 2(13)
Regulation (EU) 2019/881, the Cybersecurity ActIts European schemes are used to certify the cybersecurity of wallets; failing that, or in addition, Member States establish national schemesArt. 5c(2) Art. 5c(3) Regulation (EU) 2019/881 (Cybersecurity Act) — consolidated version of 04/02/2025

The overall picture

LevelTextsScope
Regulation910/2014 as amendedBinding and directly applicable in all Member States Art. 52
Implementing actsCommission implementing regulations and decisionsSupplement the regulation Art. 5a(23)
StandardsETSI, CEN, ISO…Mandatory or giving rise to a presumption of conformity, depending on the act that refers to them Art. 8 Art. 19a(2)
Supporting documentsRecommendation 2021/946, ARF, Commission pagesGuide implementation; the ARF describes itself as informative § 3. COOPERATION AT UNION LEVEL TO DEVELOP A TOOLBOX TO SUPPORT THE IMPLEMENTATION OF THE EUROPEAN DIGITAL IDENTITY FRAMEWORK § 1.3 Purpose, scope and audience

In Belgium

In Belgium

Situation checked in the corpus on 29-10-2026.

In Belgium, the Act of 21 July 2016 implements and supplements Regulation 910/2014; it inserts a Title 2 into Book XII of the Code of Economic Law (CDE) Act of 21-07-2016 (numac 2016009485) Code of Economic Law, Book XII, Title 2 (Art. XII.24-XII.39) + Art. I.18, XV.25-26, XV.123. No source in the corpus, consulted on 29-10-2026, shows an adaptation of Book XII of the Code of Economic Law to Regulation 2024/1183 Code of Economic Law, Book XII, Title 2 (Art. XII.24-XII.39) + Art. I.18, XV.25-26, XV.123.

The first Belgian text in the corpus that cites Regulation 2024/1183 is the Act of 13 May 2024: it entrusts the federal service integrator with the task of developing and making available a European Digital Identity Wallet (task 14 of Article 4 of the Act of 15 August 2012) Art. 5(6) Art. 4.

The Belgian situation is detailed in step 6 of the learning path.

Consolidation without official value

This page cites the consolidated versions, published on EUR-Lex, of Regulation 910/2014, of Implementing Decision 2015/1505, of Implementing Regulations 2024/2977, 2024/2979 and 2025/848, of Directive (EU) 2022/2555, of Regulation (EC) No 765/2008 and of Regulation (EU) 2019/881 Regulation (EU) No 910/2014 — consolidated version of 18/10/2024 Implementing Regulation (EU) 2024/2977 — consolidated version of 11/08/2026 Directive (EU) 2022/2555 (NIS2) — consolidated version of 27/12/2022 Regulation (EC) No 765/2008 — consolidated version of 16/07/2021 Regulation (EU) 2019/881 (Cybersecurity Act) — consolidated version of 04/02/2025, as well as the Code of Economic Law and the Act of 15 August 2012 in their Justel consolidated version Code of Economic Law, Book XII, Title 2 (Art. XII.24-XII.39) + Art. I.18, XV.25-26, XV.123 Act of 15-08-2012 (numac 2012002044). These consolidations are documentation tools: only the Official Journal of the European Union and the Belgian Official Gazette (Moniteur belge) are authentic.

Key points

  • The rule is read in Regulation 910/2014 as amended; Regulation 2024/1183 dates the amendments of 23 July 2014.
  • Commission implementing acts specify standards, procedures and formats Art. 5a(23).
  • Depending on the act that refers to it, a standard is imposed or compliance with it gives rise to a presumption of conformity Art. 8 Art. 19a(2).
  • The ARF and the Commission’s pages are informative § 1.3 Purpose, scope and audience.
  • eIDAS interacts with the GDPR, the NIS2 Directive and Regulation 765/2008 Art. 2(4) Art. 20(1) Art. 3(18).

Written by Asphalia.