What eIDAS 2.0 Means for Digital Identity and Trust Services in Europe

In 2014, the European Union took a significant step towards establishing digital trust with the adoption of the eIDAS (Electronic Identification and Trust Services) regulation. Ten years later, eIDAS 2.0 is here — a more ambitious framework aimed at providing a more secure and user-friendly European digital identity. But what exactly is changing, and what’s the impact?

A Look Back at eIDAS

What exactly is eIDAS?

The eIDAS regulation lays down the European legal framework that allows everyone — citizens, businesses, and public authorities — to use electronic identification and trust services that are recognized across the EU. Its primary goal is to simplify cross-border digital interactions while ensuring the security and legal integrity of electronic transactions.

Initially, eIDAS primarily benefited the public sector, especially in the context of online administrative processes. However, its adoption in the private sector has been limited, mainly due to a lack of harmonized standards and the absence of mandatory acceptance of notified electronic identities.

The eIDAS regulation was adopted on July 23, 2014, and came into force on September 17, 2014, with the mandatory application of trust services starting on July 1, 2016. In response to evolving challenges around security, digital trust, and service standardization, eIDAS 2.0 was adopted on March 26, 2024, and came into effect on May 20, 2024, with full implementation expected by 2026-2027.

Electronic Transactions Covered by eIDAS

Public services online

• Cross-border administrative procedures (e.g., tax returns, requests for official documents)
• Electronic voting
• Access to digital health services

Private and commercial trade

• Electronic signatures for contracts, loans or business agreements
• Business-to-business electronic invoicing
• Banking transactions (loans, investments) and payment services to third parties
• Electronic registered mail (proof of dispatch and receipt)
• Qualified document archiving (eArchiving)

What you need to know about the eIDAS regulation

• Mutual recognition of electronic identification schemes between EU Member States.
• Common framework for trust services: electronic signatures, seals, timestamps, and registered delivery.
• Three-tiered electronic signatures: simple, advanced electronic signature (AES), and qualified electronic signature (QES).
• Qualified Trust Service Providers (QTSPs): Audited entities providing legally binding trust services.
• Harmonized security standards and cross-border legal validity for electronic documents.

Why a 2.0 version?

While eIDAS V1 advanced cross-border digital interactions, its limitations became clear: fragmented interoperability, inconsistent adoption across EU member states, and limited private-sector engagement. Businesses faced barriers due to non-harmonized standards and the absence of mandatory recognition of electronic identities.

eIDAS 2.0 addresses these challenges by enhancing security protocols, expanding digital identity applications to all sectors (public and private), and delivering a seamless, standardized experience for users across the EU.

Key Innovations in eIDAS 2.0

European Digital Identity Wallet (EUDI Wallet)

The cornerstone of eIDAS 2.0, this official mobile application enables citizens to securely store and manage digital identities (e.g., civil status, age, diplomas) and selectively share attributes with public and private services. Designed for maximum privacy, it ensures users disclose only essential information while accessing cross-border services.

For details, visit the European Commission’s official page: European Digital Identity Wallet.

The EUDI Wallet is currently being rolled out, with full-scale adoption expected across EU member states by 2026-2027.

New Qualified Trust Services Under eIDAS 2.0

eIDAS 2.0 introduces a number of new qualified trust services to secure digital interactions:

• Qualified Remote Electronic Signature: Legally binding signatures online without specific hardware, equivalent to handwritten signatures
• Electronic Attestation of Attributes (EAA): Digital certificates verifying personal or professional attributes such as age or status
• Qualified Electronic Archiving (eArchiving): Secure, tamper-proof long-term storage of documents ensuring integrity and compliance
• Transaction Sealing: Guarantees authenticity and integrity of transactions by verifying issuer and detecting alterations
• Qualified Website Authentication Certificates (QWAC): TLS certificates for website authentication in sensitive sectors like banking, healthcare, and administration, replacing older certificates

These services enhance the security of digital exchanges and open the door to innovative applications across both the public and private sectors.

Harmonisation and Interoperability

The regulation harmonises identification systems throughout Europe, enabling the mutual recognition of digital identities among Member States and facilitating the cross-border mobility of citizens and businesses. Uniform rules and consistent levels of protection apply across the EU, simplifying procedures and reducing administrative complexity.

eIDAS vs eIDAS 2.0: Summary of what’s really changing

Impact on Public and Private Sectors

• Public sector: simplified access to administrative services, reduced bureaucracy, and increased efficiency.
• Businesses: new opportunities driven by greater trust in online services, streamlined identity verification, lower costs, and decreased risk of fraud.
• Sensitive sectors such as healthcare, finance, and e-commerce: secure access to medical records, more reliable financial transactions, legally valid electronic signatures, and enhanced data protection.

Key Takeaways

• eIDAS 2.0 strengthens digital security and trust across Europe while fostering innovation in the digital economy.
• The EUDI Wallet enables European citizens to easily manage their digital identities and attributes (age, qualifications, etc.), simplifying access to both public and private services.
• New trust services such as remote electronic signatures, qualified electronic archiving, and transaction sealing ensure the integrity and authenticity of digital exchanges.
• National authorities and ENISA play a crucial role in certification, supervision, and coordination to guarantee a secure and harmonized implementation of the Regulation throughout the EU.

To learn more about European regulations and their impact on organizations, read our article on cybersecurity compliance and business imperatives.