eIDAS 2.0: what do we know about the new legislation on electronic identification?

eIDAS 2.0 is expected to come into effect by the end of 2022. What are the main changes of this new version of eIDAS? How will this translate for French companies?

With the pandemic and repeated blockages, many companies have had to find solutions to ensure the continuity of their business operations. For many of them, eIDAS (electronic IDentification, Authentication and trust Services) has provided the tools and the legal framework to ensure that these companies can continue their businesses by allowing the signing of commercial or employment contracts, loans, no doubt about the legal complications. in case of dispute.

Entered into force in summer 2016, the eIDAS regulation was put in place to define the legal framework and unify digital identity at European level. This European regulation provides a common digital space that public and private services can rely on to carry out their electronic transactions with the utmost confidence. Its goal? Improve business and trade in the Union.

In its first version, eIDAS proposed 3 main directions: that of defining the concept of electronic signature, of asserting its admissibility before courts across Europe, but also of addressing its legal effects.

Today, a new version of eIDAS is expected to be implemented by the end of 2022. What are the main changes of this new version of eIDAS? How will this translate for French companies?

One way to best meet the demands of the current market

Today, the state of the market encourages the right to evolve in new directions. Although the first version of eIDAS laid the fundamental foundations by defining in particular the different levels of electronic signature, the evolution of the different services obliges European justice to specify new elements, and therefore to move towards an improved version of eIDAS.

The technological solutions, the growth of the service offerings that are offered (for example: online banking or commercial services), as well as the expectations in terms of authentication and identification are no longer the same as before. These advances require an even higher level of security.

Establishing a framework for electronic signature, seal, registered mail and time stamp services or for the production of authentication certificates is no longer sufficient given the current market situation.

Indeed, the new version of eIDAS now takes into account new uses such as qualified electronic archiving, qualified European electronic register or remote management of QSCD1, which needed to be regulated.

Facilitated processes for French and European companies

The objective of this review is to facilitate the acceptability, recognition and interoperability of the solutions that will be presented for public and private services. Therefore, these services will benefit from the same experience in terms of electronic identification, in particular thanks to the concept of “European digital identity wallet”.

This wallet will allow the different services to guarantee a unified identity in order to offer new means of authentication valid throughout the European Union. For example, with the introduction of this service, the creation of a qualified electronic signature will be facilitated because all the elements necessary for it will be digitally saved in the same place. In addition, with the 2.0 version of eIDAS, the operations will also be simplified, which allow in particular to start the subscription process, to open accounts.

eIDAS 2.0 will also make it possible to simplify internal processes thanks to “attributes” that will electronically certify the status of a person within an organization. For example, it will be possible to digitally trace a person who has delegated the signature of a document in a safe and secure way.

All of its solutions will benefit from its own certification schemes and control activities. Companies and public bodies will be able to diversify their offer but also offer shorter times for the complete certification of the final service offer that will be provided to citizens.

With eIDAS 2.0, the goal is that 80% of citizens will be covered by an electronic wallet by 2030 and that the support of this authentication in public services and in the offerings of major service providers, especially banking, include their subscription.

Pending its entry into force, companies and public bodies can rely on the reference system of PVID requirements published by ANSSI, which allows to substantially or significantly guarantee the identification of a user, the authenticity of what presents and the fact that he is the legitimate owner.

Leave a Comment