Commission Implementing Regulation (EU) 2025/1568 of 29 July 2025 laying down rules for the application of Regulation (EU) No 910/2014
as it stood on 2025-07-29, permalink: /eu-eurlex/32025r1568/2025-07-29
Article 1
Where a Member State makes a pre-notification of an electronic identification scheme to the Commission and to the other Member States, the peer review shall be initiated in accordance with Article 2.
The Member State that makes a pre-notification of an electronic identification scheme may, at any point, withdraw its pre-notification. Where the Member State withdraws their pre-notification of the electronic identification scheme, the peer review shall be considered as terminated.
Any Member State may decide to participate in the peer review of the electronic identification scheme of another Member State.
Each Member State involved in a peer review shall bear the costs it incurs in the process.
Representatives of the Member States that conduct the peer review shall use the information obtained through the peer review solely for the purposes of that review and shall not disclose any sensitive or confidential information obtained during the peer review to third parties.
A Member State that decides to participate in the peer review of an electronic identification scheme of another Member State shall disclose any conflict of interest in relation to representatives appointed by that Member State. Where there is a conflict of interest, the Member State whose electronic identification scheme is being peer-reviewed may refuse the participation of the relevant representative in the assessment of its electronic identification scheme.
Any disputes arising during the peer review in relation to the peer review activities as laid down in Article 4(4) of this Regulation shall be settled in accordance with the Cooperation Group’s rules of procedure.
An electronic identification scheme shall not be subject to further peer review within two years from the conclusion of a peer review, except where significant changes set out in Article 6(1) were made to the peer-reviewed electronic identification scheme.
Article 2
- The pre-notification shall include at least:
| (a) | a comparison between the pre-notified electronic identification scheme and requirements laid down in Implementing Regulation (EU) 2015/1502, under the form of a level of assurance mapping document for the peer review in accordance with Annex I to this Regulation; |
|---|
| (b) | a high-level description of the electronic identification scheme, of its ecosystem and of electronic identification in the Member State having made the pre-notification, under the form of a whitepaper in accordance with Annex II to this Regulation; |
|---|
| (c) | information regarding interoperability of the electronic identification scheme and the requirements laid down in Implementing Regulation (EU) 2015/1501, under the form of an interoperability framework mapping document in accordance with the template set out in Annex III to this Regulation. |
|---|
The Commission shall disseminate the pre-notification information to the Cooperation Group.
The information required under paragraph 1, point (c), shall be provided at least in English. Member States shall not be obliged to translate any document where this would create an unreasonable administrative or financial burden.
Article 3
Upon confirmation of receipt of a complete pre-notification, the Commission shall inform the Cooperation Group of the initiation of the peer review and schedule a meeting where the pre-notified electronic identification scheme is put on the meeting agenda for presentation to the Cooperation Group by the Member State having made the pre-notification.
The chair of the Cooperation Group shall ensure that the scheduled meeting referred to in paragraph 1 takes place no later than two months after the Cooperation Group is informed of the initiation of the peer review.
The date of the presentation shall be considered the official start date of the peer review.
After the Member State having made the pre-notification has given the presentation referred to in paragraph 3, the other Member States may appoint representatives to participate in the peer review on their behalf. If they do so, they shall provide the names and contact details of their representatives. Those appointed representatives shall form the peer review group.
The members of the peer review group shall agree on assigning the following roles:
| (a) | one coordinator who shall be responsible for organising the peer review and managing communication with Member States, the Cooperation Group and the Commission; |
|---|
| (b) | up to three rapporteurs depending on the scope of the peer review and each one of them to lead a working group as referred to in Article 4(2); |
|---|
| (c) | at least one active member per working group, who shall assist in generating questions and providing feedback to the rapporteurs and contribute to drafting the final peer review report. |
|---|
- The coordinator referred to in paragraph 4, point (a), shall oversee proper execution of the peer review and monitor compliance with the procedural requirements set out in this Regulation. To that end, the coordinator shall carry out the following tasks in a timely manner:
| (a) | organisation of the questions and answers; |
|---|
| (b) | finalisation of the peer review report; |
|---|
| (c) | drafting of the opinion on the peer reviewed electronic identification scheme. |
|---|
The rapporteurs referred to in paragraph 4, point (b), shall identify questions for the Member State having made the pre-notification and draft the elements of the peer review report that relate to the area of responsibility of their respective working group.
Taking into account the guidance provided by the Cooperation Group, the Member State having made the pre-notification and the Member States involved in the peer review shall agree on any organisational arrangements relating to the peer review not specifically provided for in this Regulation, including rules and guidelines regarding confidentiality and conflicts of interest.
The duration of the peer review shall not exceed three months from the official start date of the peer review referred to in paragraph 3 and may be extended by a maximum of two months where all Member States involved in the peer review agree to do so.
Article 4
The peer review group shall conduct the peer review based on the information provided in accordance with Article 2(1) by the Member State having made the pre-notification.
The peer review shall be organised in three working groups, or using any other process agreed in the Cooperation Group in accordance with its Rules of Procedure. Where working groups are used, each working group shall be composed of one rapporteur and at least one active member.
The working groups referred to in paragraph 2 shall be the following:
| (a) | an enrolment working group, peer-reviewing the alignment of the pre-notified electronic identification scheme with the requirements in relation to enrolment as set out in section 2.1 of the Annex to Implementing Regulation (EU) 2015/1502; |
|---|
| (b) | an electronic identification means management and authentication working group, peer-reviewing the alignment of the pre-notified electronic identification scheme with the requirements in relation to electronic identification means management and authentication as set out in sections 2.2 and 2.3 of the Annex to Implementing Regulation (EU) 2015/1502; |
|---|
| (c) | a management and organisation working group peer-reviewing the alignment of the pre-notified electronic identification scheme with the requirements in relation to management and organisation as set out in section 2.4 of Implementing Regulation (EU) 2015/1502. |
|---|
- The peer review shall include, but is not limited to, one or more of the following activities:
| (a) | assessment of relevant documentation provided by the Member State having made the pre-notification; |
|---|
| (b) | examination of processes described as part of that documentation; |
|---|
| (c) | technical seminars; |
|---|
| (d) | consideration of independent third-party assessments, where relevant assessments of this kind are available; |
|---|
| (e) | drafting of the peer review report that summarises the peer review’s findings and results. |
|---|
The working groups may make duly justified requests for additional information, supported by additional documentation, from the Member State having made the pre-notification where the information provided in accordance with Article 2(1) is not sufficient, for the termination of the peer review.
The Member State having made the pre-notification shall comply with such requests except where one of the following applies:
| (a) | it does not possess the information or documentation and obtaining it would generate an unreasonable administrative burden; |
|---|
| (b) | the information or documentation requested concerns matters of public security or national security; |
|---|
| (c) | the information concerns business matters, professional or company secrets; |
|---|
| (d) | the sensitivity of the information makes it impossible to establish a secure channel to communicate the information to the members of the peer review group. |
|---|
- In such cases, the Member State having made the pre-notification shall inform the coordinator of the reasons for refusing to provide the requested information or documentation and shall provide a high-level summary of the information or a redacted version of the documentation.
Article 5
- Without prejudice to Article 3(9), the peer review group shall:
| (a) | provide a draft peer review report to the Member State having made the pre-notification no later than three months after the start date of the peer review referred to in Article 3(3) unless the peer review is subject to an extension in accordance with Article 3(8) where the report is due according to the agreed extension; |
|---|
| (b) | provide the draft final peer review report to the Commission and the Cooperation Group after taking into consideration any observations from the Member State having made the pre-notification on the content of the draft peer review report, and no later than three months and two weeks after the official start date of the peer review pursuant to Article 3(3) unless the peer review is subject to an extension in accordance with Article 3(8) where the report is due according to the agreed extension; |
|---|
| (c) | provide the Member State having made the pre-notification with a draft opinion on the pre-notified electronic identification scheme no later than three months and two weeks after the official start date of the peer review referred to in Article 3(3) unless the peer review is subject to an extension in accordance with Article 3(8) where the opinion is due according to the agreed extension and shall prepare the draft opinion using the template set out in Annex IV; |
|---|
| (d) | provide the Commission and the Cooperation Group with a draft final opinion on the pre-notified electronic identification scheme no later than three months and three weeks after the start date of the peer review referred to in Article 3 (3) unless the peer review is subject to an extension in accordance with Article 3(8) where the opinion is due according to the agreed extension. |
|---|
Before the Cooperation Group adopts and publishes, on a dedicated website of the Commission, its final opinion on the conclusion of the peer review in accordance with paragraph 9, it may require additional information or clarification from the Member State having made the pre-notification or from the peer review group.
The Member State having made the pre-notification shall provide the required additional information referred to in paragraph 2, except where one of the following applies:
| (a) | the Member State does not possess the information and obtaining it would cause an unreasonable administrative burden; |
|---|
| (b) | the information concerns matters of public or national security; |
|---|
| (c) | the information concerns matters of business, professional or company secrets; |
|---|
| (d) | the sensitivity of the information makes it impossible to establish a secure channel to communicate the information to the Cooperation Group. |
|---|
The final peer review report shall list the information that was requested by the peer review group or by the Cooperation Group but could not be provided on one or more grounds set out in paragraph 3, without specifying the reasons provided by the Member State having made the pre-notification. The impact of any unavailability of information may be examined by the peer review group in the final peer review report.
The peer review group shall present the final peer review report and its draft final opinion to the Cooperation Group no later than four months, or in the case of prolongation in accordance with Article 3(8) no later than six months after the official start date of the peer review pursuant to Article 3(3).
The final opinion of the peer review group on the electronic identification scheme of the Member State having made the pre-notification shall list any commitments made by that Member State.
After the presentation of the final peer review report and the final opinion of the peer review group, the Cooperation Group shall adopt and publish its own opinion on the conclusion of the peer review, indicating if and how the peer-reviewed electronic identification scheme meets the requirements set out in Implementing Regulation (EU) 2015/1502 that apply to the assurance levels indicated by the Member State having made the pre-notification, in accordance with Annex I of this Regulation. The adoption process shall follow the rules of procedure of the Cooperation Group.
The opinion of the Cooperation Group shall identify the Member State having made the pre-notification as well as the pre-notified electronic identification scheme and its assurance level. The opinion shall also state whether the peer review was completed successfully.
Information provided in accordance with Article 2(1) shall be published by the Cooperation Group, except where the Member State that provided the information has indicated in writing that such information should not be made public.
Article 6
Where a notified electronic identification scheme changes in a manner that is likely to impact its interoperability, security or trustworthiness, the Member State having made the notification shall without undue delay notify the Cooperation Group of those changes and update the information previously provided.
Following the receipt of a notification referred to in paragraph 1, and provided the notified electronic identification scheme has been peer-reviewed, any Member State of the Cooperation Group may request an update to the peer review.
In case of a request for an update, the procedures set out in Articles 3 to 5 shall apply accordingly and the peer review group shall limit the peer review to the elements that have been changed pursuant to the original notification and to the impacts of those changes.
Article 7
Implementing Decision (EU) 2015/296 is hereby repealed.
Article 8
This Regulation shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union.
Provenance and validity dates, identifier, hash
| as of | 2025-07-29 → this version applied |
| valid | 2025-07-29 → open publisher-asserted |
| type | REG_IMPL Commission Implementing Regulation (EU) 2025/1568 of 29 July 2025 laying down rules for the application of Regulation (EU) No 910/2014 of the European Parliament and of the Council as regards procedural arrangements for peer reviews of electronic identification schemes and for cooperation on the organisation of such reviews within the Cooperation Group and repealing Commission Implementing Decision (EU) 2015/296 |
| language | en |
| published | 2025-07-29 |
| lex_id | eu-eurlex:32025r1568:2025-07-29 |
| record sha256 | 304271415726d68d29b8374e6c2b00bd5c35d6e722907076fb6c776387efb656 |
New here? What am I looking at?
This is a consolidated text: the original law with every later amendment merged in, as the official publisher produced it for a given date. Laws are amended constantly, so “the law” has no single text, only a text per date. That date is the banner above.
It has no legal force. Only the version published in the official gazette (Mémorial / Official Journal) is authentic, the publishers say so themselves, and so do we. Lex reproduces their text without altering a byte, and links the source on every page. This is legal information, never legal advice: it reports what the text said, never what it means for your situation.
“Valid from → to” = the window in which this text applied. “Open” = still current as far as the publisher has consolidated. Each article carries its own hash so you can prove it was not tampered with , here is how.
timeline next version (2025-07-29) →
| tier | A, publisher-supplied validity dates |
| history begins | publisher |
| index built | 2026-08-07T19:46:23Z · corpus 8d5e859 |
| stamp signature | valid (ECDSA-P256) |