In short
Each Member State designates supervisory bodies: one or more for wallet providers, one for trust services Art. 46a(1) Art. 46b(1). Accredited conformity assessment bodies certify wallets and audit qualified providers Art. 3(18) Art. 5c(1) Art. 20(1). National trusted lists show who is qualified Art. 22(1); the Commission publishes other lists for the wallet ecosystem Art. 5.
This page supplements step 2 on the actors.
Supervisory bodies
The regulation provides for two kinds of supervisory bodies, which should not be confused.
For wallets, each Member State designates one or more supervisory bodies established in its territory, entrusted with the necessary powers and adequate resources to act effectively, efficiently and independently Art. 46a(1). They supervise the wallet providers established in that State, through ex ante and ex post supervisory activities Art. 46a(3)(a). They may in particular carry out on-site inspections, require a provider to remedy a failure to comply Art. 46a(4)(d) Art. 46a(4)(e), and suspend or cancel the registration of a relying party in the event of illegal or fraudulent use of the wallet Art. 46a(4)(f). If the provider does not remedy a failure, the body may require it to suspend or cease the provision of the wallet Art. 46a(5).
For trust services, each Member State designates a supervisory body established in its territory, or, upon mutual agreement, in another Member State Art. 46b(1). It supervises qualified providers ex ante and ex post; for non-qualified providers, it acts only ex post, when it is informed of a failure to comply Art. 46b(3). Among its tasks:
to grant qualified status to trust service providers and to the services they provide, and
to withdraw that status in accordance with Articles 20 and 21;
It also informs the body responsible for the national trusted list of its decisions to grant or withdraw this status, unless it is itself that body Art. 46b(4)(h), and analyses the conformity assessment reports of qualified providers Art. 46b(4)(c).
Both kinds of bodies submit to the Commission each year, by 31 March, a report on their activities of the previous year Art. 46a(6) Art. 46b(6). The Commission publishes the list of notified supervisory bodies Art. 46a(2) Art. 46b(2).
To make these bodies work together, each Member State designates a single point of contact for trust services, wallets and notified electronic identification schemes Art. 46c(1). Supervisory bodies may request mutual assistance from one another Art. 46d(1), and the Commission establishes a European Digital Identity Cooperation Group Art. 46e(1).
Conformity assessment bodies
The regulation speaks of a conformity assessment body (the ARF, the Architecture and Reference Framework of the wallet, cited here in its version 3.0.0 ARF 3.0.0 and which presents itself as informative § 1.3 Purpose, scope and audience, uses the abbreviation CAB) § 3.12 Conformity Assessment Bodies (CAB). It is a body accredited to carry out the conformity assessment of a qualified provider and its services, or to certify wallets or electronic identification means Art. 3(18).
For this, the regulation refers to Regulation (EC) No 765/2008. That regulation defines accreditation as an attestation by a national accreditation body that a conformity assessment body meets the requirements for carrying out a specific conformity assessment activity Art. 2(10). Each Member State appoints a single national accreditation body Art. 4(1). The chain is therefore: the State appoints the accreditation body, which accredits the conformity assessment bodies, which certify or audit.
Who checks what? The table distinguishes the objects checked:
| Object | Who checks | Source |
|---|---|---|
| Wallets and the electronic identification scheme under which they are provided | conformity assessment bodies designated by Member States; for cybersecurity, according to the European schemes of Regulation 2019/881 and, where these do not cover everything (as well as for the other requirements), according to national schemes | Art. 5c(1) Art. 5c(2) Art. 5c(3) |
| Electronic identification schemes to be notified (cybersecurity) | conformity assessment bodies designated by Member States | Art. 12a(1) |
| Qualified trust service providers | a conformity assessment body, before the status is granted and then at least every 24 months | Art. 21(1) Art. 20(1) |
| Qualified electronic signature creation devices | appropriate public or private bodies designated by Member States | Art. 30(1) |
For qualified providers, Implementing Regulation 2025/2162 specifies the accreditation of these bodies, the assessment report and the conformity assessment scheme Implementing Regulation (EU) 2025/2162. The certification of wallets is detailed in step 3.
Trusted lists
A trusted list is an official list, published by a Member State, that contains information on the qualified trust service providers for which it is responsible and on the qualified services they provide Art. 22(1). It is electronically signed or sealed and is provided in a machine-processable form Art. 22(2). It is decisive: a provider may begin to provide a qualified service only once its status is indicated in that list Art. 21(3). Its technical specifications and formats are set by Implementing Decision 2015/1505 Art. 1.
Member States notify the Commission of where their lists are published, and the Commission makes this information available to the public in a signed or sealed form Art. 22(3) Art. 22(4). This is the Union’s List of Trusted Lists (LOTL). In the version of 15 October 2026 held in the corpus, it points to the national lists of 31 territories, including an entry for the United Kingdom Summary of the EU LOTL, sequence 397.
The wallet ecosystem has its own lists. Member States notify the Commission of the bodies that maintain the registers of relying parties, that provide the wallets and that ensure the association of PID with the wallet, as well as the validation mechanisms Art. 5a(18). The Commission publishes the list of registrars and registers and, where applicable, the lists of providers of wallets, of PID, of access certificates and of registration certificates Art. 5(1) Art. 5(2). The ARF calls them Lists of Trusted Entities (LoTE) and explains why they are distinct from trusted lists: wallet providers, PID providers and access certificate providers are not trust service providers within the meaning of the regulation § 3.5 Trusted List Provider or LoTE Provider. It also states that there is no such list of relying parties: they are too numerous, and access certificates allow the wallet to authenticate them § 3.5 Trusted List Provider or LoTE Provider.
| List | Who publishes it | What it contains | Source |
|---|---|---|---|
| National trusted list | each Member State | qualified providers and their qualified services | Art. 22(1) |
| List of Trusted Lists (LOTL) | the Commission | where to find the national lists | Art. 22(4) Summary of the EU LOTL, sequence 397 |
| Wallet ecosystem lists | the Commission, on notification by the States | registrars and registers of relying parties; where applicable, providers of wallets, of PID, of access certificates and of registration certificates | Art. 5 |
| List of certified wallets | the Commission, in the Official Journal | wallets provided and certified | Art. 5d(1) Art. 5d(3) |
In Belgium
In Belgium
Situation checked in the corpus on 29-10-2026.
The Code of Economic Law (CDE), in point 16° of its Article I.18, defines the Supervisory Body for trust service providers as follows (cited in its French version):
l’organe visé à l’article 17, paragraphe 1, du règlement 910/2014, créé au sein du Service
public fédéral Economie, PME, Classes moyennes et Energie
In other words, it is the body referred to in Article 17(1) of Regulation 910/2014, set up within the Federal Public Service Economy, SMEs, Self-employed and Energy (FPS Economy). This definition is reproduced as it appears in the Code. In the consolidated version of Regulation 910/2014, the supervision of trust services is organised by Art. 46b, a provision inserted by Regulation 2024/1183 Art. 46b.
The Belgian trusted list is maintained by the FPS Economy; the version held in the corpus bears sequence number 84 and is dated 20 October 2026 Trusted List BE, sequence number 84 — summary.
No source in the corpus, consulted on 29-10-2026, indicates which body Belgium has designated to supervise wallet providers Art. 46a(1).
Consolidation without official value
This page cites the consolidated versions, published on EUR-Lex, of Regulation 910/2014, of Regulation (EC) No 765/2008, of Implementing Decision 2015/1505 and of Implementing Regulation 2024/2980 Regulation (EU) No 910/2014 — consolidated version of 18/10/2024 Regulation (EC) No 765/2008 — consolidated version of 16/07/2021 Implementing Decision (EU) 2015/1505 — consolidated version of 29/04/2026 Implementing Regulation (EU) 2024/2980 — consolidated version of 11/08/2026, as well as the Code of Economic Law in its consolidated version Code of Economic Law, Book XII, Title 2 (Art. XII.24-XII.39) + Art. I.18, XV.25-26, XV.123. These consolidations are documentation tools: only the Official Journal of the European Union and the Belgian Official Gazette (Moniteur belge) are authentic.
Key points
- Two kinds of supervisory bodies: for wallet providers and for trust services Art. 46a Art. 46b.
- It is the supervisory body that grants and withdraws qualified status Art. 46b(4)(g).
- Conformity assessment bodies are accredited by the national accreditation body Art. 3(18) Art. 2(10).
- A qualified service may be provided only once it is indicated in the national trusted list Art. 21(3).
- The Commission publishes the List of Trusted Lists and the wallet ecosystem lists Art. 22(4) Art. 5.
Written by Asphalia.