Commission Implementing Regulation (EU) 2026/1735 of 15 July 2026 amending Implementing Re…
as it stood on 2026-07-15, permalink: /eu-eurlex/32026r1735/2026-07-15
Article 1
Implementing Regulation (EU) 2025/1569 is amended as follows:
| (1) | Article 3, paragraph 2, is replaced by the following:‘2. Where providers of qualified electronic attestations of attributes and providers of electronic attestations of attributes issued by or on behalf of a public sector body responsible for an authentic source issue electronic attestations of attributes which are included in schemes registered in the catalogue of schemes for the attestation of attributes, they shall comply with the requirements of the corresponding scheme for the attestation of attributes. Policies and procedures established by the issuers of attestations in order to comply with the requirements of the schemes for the attestation of attributes shall be part of the conformity assessment established in Regulation (EU) No 910/2014.’. |
|---|
| (2) | Article 4 is amended as follows:(a)paragraph 1 is deleted;(b)paragraph 3 is replaced by the following:‘3. Providers of qualified electronic attestations of attributes and providers of electronic attestations of attributes issued by or on behalf of a public sector body responsible for an authentic source, whenever those attestations are issued with a validity period of more than 24 hours, shall revoke them in at least the following circumstances:(a)upon the request of the person to whom the electronic attestation of attributes was issued or, where applicable, of the subject of the attestation;(b)where the provider becomes aware that there has been a compromise of the security or trustworthiness of the qualified electronic attestations of attributes or electronic attestations of attributes issued by or on behalf of a public sector body responsible for an authentic source;(c)in other situations, as required by Union or national law.’.(c)paragraph 4 is replaced by the following:‘4. Providers of qualified electronic attestations of attributes and providers of electronic attestations of attributes issued by or on behalf of a public sector body responsible for an authentic source shall set up revocation techniques and management methods that are privacy preserving and hindering linkability or traceability. The revocation techniques shall comply with the requirements set out in Annex II.’. |
|---|---|
| (a) | paragraph 1 is deleted; |
| (b) | paragraph 3 is replaced by the following:‘3. Providers of qualified electronic attestations of attributes and providers of electronic attestations of attributes issued by or on behalf of a public sector body responsible for an authentic source, whenever those attestations are issued with a validity period of more than 24 hours, shall revoke them in at least the following circumstances:(a)upon the request of the person to whom the electronic attestation of attributes was issued or, where applicable, of the subject of the attestation;(b)where the provider becomes aware that there has been a compromise of the security or trustworthiness of the qualified electronic attestations of attributes or electronic attestations of attributes issued by or on behalf of a public sector body responsible for an authentic source;(c)in other situations, as required by Union or national law.’. |
| (a) | upon the request of the person to whom the electronic attestation of attributes was issued or, where applicable, of the subject of the attestation; |
| (b) | where the provider becomes aware that there has been a compromise of the security or trustworthiness of the qualified electronic attestations of attributes or electronic attestations of attributes issued by or on behalf of a public sector body responsible for an authentic source; |
| (c) | in other situations, as required by Union or national law.’ |
| (c) | paragraph 4 is replaced by the following:‘4. Providers of qualified electronic attestations of attributes and providers of electronic attestations of attributes issued by or on behalf of a public sector body responsible for an authentic source shall set up revocation techniques and management methods that are privacy preserving and hindering linkability or traceability. The revocation techniques shall comply with the requirements set out in Annex II.’. |
| (3) | Article 9 is amended as follows:(a)the following paragraph 2a is inserted after paragraph 2:‘2a. The verification mechanism shall comply with the specifications set out in Annex IV.’.(b)paragraph 4 is replaced by the following:‘4. The verification result shall state whether the attribute has been verified or not and specify the public sector body responsible for the authentic source or, where applicable, the public sector body designated to act on behalf of the authentic source against which the attribute has been verified.The verification result shall be signed or sealed by the public sector body responsible for an authentic source, or by the designated intermediary recognised at national level, using at least an advanced electronic signature based on a qualified certificate for electronic signatures or an advanced electronic seal based on a qualified certificate for electronic seals, respectively.’. |
|---|---|
| (a) | the following paragraph 2a is inserted after paragraph 2:‘2a. The verification mechanism shall comply with the specifications set out in Annex IV.’. |
| (b) | paragraph 4 is replaced by the following:‘4. The verification result shall state whether the attribute has been verified or not and specify the public sector body responsible for the authentic source or, where applicable, the public sector body designated to act on behalf of the authentic source against which the attribute has been verified.The verification result shall be signed or sealed by the public sector body responsible for an authentic source, or by the designated intermediary recognised at national level, using at least an advanced electronic signature based on a qualified certificate for electronic signatures or an advanced electronic seal based on a qualified certificate for electronic seals, respectively.’. |
| (4) | Annex I is replaced by the text set out in Annex I to this Regulation. |
|---|
| (5) | Annex II is replaced by the text set out in Annex II to this Regulation. |
|---|
| (6) | The text set out in Annex III to this Regulation is added as Annex IV. |
|---|
Article 2
This Regulation shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union.
Article 1(3) shall apply from 1 January 2027.
Provenance and validity dates, identifier, hash
| as of | 2026-07-15 → this version applied |
| valid | 2026-07-15 → open publisher-asserted |
| type | REG_IMPL Commission Implementing Regulation (EU) 2026/1735 of 15 July 2026 amending Implementing Regulation (EU) 2025/1569 as regards applicable standards and specifications |
| language | en |
| published | 2026-07-15 |
| lex_id | eu-eurlex:32026r1735:2026-07-15 |
| record sha256 | 5d324490cd530b059e790b45a3a21ef90ba6dda3fc8b8ceebb1bdfb5110bbce0 |
New here? What am I looking at?
This is a consolidated text: the original law with every later amendment merged in, as the official publisher produced it for a given date. Laws are amended constantly, so “the law” has no single text, only a text per date. That date is the banner above.
It has no legal force. Only the version published in the official gazette (Mémorial / Official Journal) is authentic, the publishers say so themselves, and so do we. Lex reproduces their text without altering a byte, and links the source on every page. This is legal information, never legal advice: it reports what the text said, never what it means for your situation.
“Valid from → to” = the window in which this text applied. “Open” = still current as far as the publisher has consolidated. Each article carries its own hash so you can prove it was not tampered with , here is how.
timeline next version (2026-07-15) →
| tier | A, publisher-supplied validity dates |
| history begins | publisher |
| index built | 2026-08-07T19:46:23Z · corpus 8d5e859 |
| stamp signature | valid (ECDSA-P256) |