Article 8 · Commission Implementing Regulation (EU) 2025/848

Contents

Article 8Wallet-relying party registration certificates#

1.Member States shall authorise at least one certificate authority to issue wallet relying party registration certificates. Member States shall ensure that providers of wallet-relying party registration certificates issue those certificates in an automated manner and without undue delay after the registration.

2.Member States shall:

(a)require providers of wallet-relying party registration certificates to issue wallet-relying party registration certificates exclusively to registered wallet-relying parties;

(b)ensure that each intended use is expressed in the wallet-relying party registration certificates;

(c)ensure that wallet-relying party registration certificates include a general access policy, being syntactically and semantically harmonised across the Union, informing users that the wallet-relying party is only allowed to request the data specified in the registration certificates for the intended use registered in the registration certificates;

(d)ensure that providers of wallet solutions established in that Member State comply with the general access policy by informing users when a wallet-relying party requests data that is not specified in the registration certificates;

(e)implement wallet-relying party registration certificates in a syntactically and semantically harmonised manner and in line with the requirements set out in Annex V;

(f)implement dedicated certificate policies and certificate practice statements for the wallet-relying party registration certificates in accordance with the requirements set out in Annex V;

(g)ensure that wallet-relying parties provide a URL to the privacy policy regarding the intended use.

3.The policy referred to in point (g) shall be expressed in the wallet-relying party registration certificate.

Defined terms · 16

Show every defined term

critical assets
means assets within or in relation to a wallet unit of such extraordinary importance that where their availability, confidentiality or integrity are compromised, this would have a very serious, debilitating effect on the ability to rely on the wallet unit;
national register of wallet-relying parties
means a national electronic register used by a Member State to make information on wallet-relying parties registered in that Member State publicly available as set out in Article 5b(5) of Regulation (EU) No 910/2014;
provider of person identification data
means a natural or legal person responsible for issuing and revoking the person identification data and ensuring that the person identification data of a user is cryptographically bound to a wallet unit;
provider of wallet-relying party access certificates
means a natural or legal person mandated by a Member State to issue wallet-relying party access certificates to wallet-relying parties registered in that Member State;
provider of wallet-relying party registration certificates
means a natural or legal person mandated by a Member State to issue wallet-relying party registration certificates to wallet-relying parties registered in that Member State.
registrar of wallet-relying parties
means the body responsible for establishing and maintaining the list of registered wallet-relying parties established in their territory and who has been designated by a Member State;
wallet instance
means the application installed and configured on a wallet user’s device or environment, which is part of a wallet unit, and that the wallet user uses to interact with the wallet unit;
wallet provider
means a natural or legal person who provides wallet solutions;
wallet secure cryptographic application
means an application that manages critical assets by being linked to and using the cryptographic and non-cryptographic functions provided by the wallet secure cryptographic device;
wallet secure cryptographic device
means a tamper-resistant device that provides an environment that is linked to and used by the wallet secure cryptographic application to protect critical assets and provide cryptographic functions for the secure execution of critical operations;
wallet solution
means a combination of software, hardware, services, settings, and configurations, including wallet instances, one or more wallet secure cryptographic applications and one or more wallet secure cryptographic devices;
wallet unit
means a unique configuration of a wallet solution that includes wallet instances, wallet secure cryptographic applications and wallet secure cryptographic devices provided by a wallet provider to an individual wallet user;
wallet user
means a user who is in control of the wallet unit;
wallet-relying party
means a relying party that intends to rely upon wallet units for the provision of public or private services by means of digital interaction;
wallet-relying party access certificate
means a certificate for electronic seals or signatures authenticating and validating the wallet-relying party issued by a provider of wallet-relying party access certificates;
wallet-relying party registration certificate
means a data object that describes the intended use of the relying party and indicates the attributes the relying party has registered to intend to request from users;