Article 1 · Commission Implementing Regulation (EU) 2025/2530

Contents

Article 1Notifications to the supervisory body#

1.In notifications referred to in Article 24(2), point (a), of Regulation (EU) No 910/2014, qualified trust service providers shall cover at least significant changes to all of the following elements:

(a)the service descriptions, policies, practice statements or associated terms and conditions;

(b)the technical architecture of the qualified trust services, or any trustworthy systems or products referred to in Article 24(2), points (e) and (f), of Regulation (EU) No 910/2014;

(c)the hosting of any technical components required for the provision of the qualified trust services, or the technical services pertaining to these technical components;

(d)the use of cryptographic techniques or cryptographic materials in the provision of the qualified trust services;

(e)the registration and identification procedures;

(f)the organisational structure or governance of the trust service provider;

(g)the termination plan;

(h)financial resources and liability insurance referred to in Article 24(2), point (c) of Regulation (EU) No 910/2014;

(i)elements with an impact on the content of the corresponding national trusted list;

(j)third parties involved in the provision of the qualified trust services, including subcontractors or service providers, or to contractual terms with these third parties.

2.Notifications referred to in paragraph 1 shall include:

(a)description of the change;

(b)planned date and time of the change;

(c)reasons for the change and, where applicable, evidence for the reasons;

(d)where applicable, updated documents.