keyboard_tab EIDAS 2014/0910 EN

whereas exceeding:

• whereas (37) 1
• whereas (54) 1

definitions:

• electronic identification
• electronic identification means
• person identification data
• electronic identification scheme
• authentication
• relying party
• public sector body
• body governed by public law
• signatory
• electronic signature
• advanced electronic signature
• qualified electronic signature
• electronic signature creation data
• certificate for electronic signature
• qualified certificate for electronic signature
• trust service
• qualified trust service
• conformity assessment body
• trust service provider
• qualified trust service provider
• product
• electronic signature creation device
• qualified electronic signature creation device
• creator of a seal
• electronic seal
• advanced electronic seal
• qualified electronic seal
• electronic seal creation data
• certificate for electronic seal
• qualified certificate for electronic seal
• electronic seal creation device
• qualified electronic seal creation device
• electronic time stamp
• qualified electronic time stamp
• electronic document
• electronic registered delivery service
• qualified electronic registered delivery service
• certificate for website authentication
• qualified certificate for website authentication
• validation data
• validation

Article 13

Liability and burden of proof

1.   Without prejudice to paragraph 2, trust_service providers shall be liable for damage caused intentionally or negligently to any natural or legal person due to a failure to comply with the obligations under this Regulation.

The burden of proving intention or negligence of a non-qualified trust_service provider shall lie with the natural or legal person claiming the damage referred to in the first subparagraph.

The intention or negligence of a qualified trust_service provider shall be presumed unless that qualified trust_service provider proves that the damage referred to in the first subparagraph occurred without the intention or negligence of that qualified trust_service provider.

2.   Where trust_service providers duly inform their customers in advance of the limitations on the use of the services they provide and where those limitations are recognisable to third parties, trust_service providers shall not be liable for damages arising from the use of services exceeding the indicated limitations.

3.   Paragraphs 1 and 2 shall be applied in accordance with national rules on liability.

Article 28

Qualified certificates for electronic_signatures

1.   Qualified certificates for electronic_signatures shall meet the requirements laid down in Annex I.

2.   Qualified certificates for electronic_signatures shall not be subject to any mandatory requirement exceeding the requirements laid down in Annex I.

3.   Qualified certificates for electronic_signatures may include non-mandatory additional specific attributes. Those attributes shall not affect the interoperability and recognition of qualified electronic_signatures.

4.   If a qualified certificate for electronic_signatures has been revoked after initial activation, it shall lose its validity from the moment of its revocation, and its status shall not in any circumstances be reverted.

5.   Subject to the following conditions, Member States may lay down national rules on temporary suspension of a qualified certificate for electronic_signature:

(a)	if a qualified certificate for electronic_signature has been temporarily suspended that certificate shall lose its validity for the period of suspension;

(b)	the period of suspension shall be clearly indicated in the certificate database and the suspension status shall be visible, during the period of suspension, from the service providing information on the status of the certificate.

6.   The Commission may, by means of implementing acts, establish reference numbers of standards for qualified certificates for electronic_signature. Compliance with the requirements laid down in Annex I shall be presumed where a qualified certificate for electronic_signature meets those standards. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 48(2).

Article 38

Qualified certificates for electronic_seals

1.   Qualified certificates for electronic_seals shall meet the requirements laid down in Annex III.

2.   Qualified certificates for electronic_seals shall not be subject to any mandatory requirements exceeding the requirements laid down in Annex III.

3.   Qualified certificates for electronic_seals may include non-mandatory additional specific attributes. Those attributes shall not affect the interoperability and recognition of qualified electronic_seals.

4.   If a qualified certificate for an electronic_seal has been revoked after initial activation, it shall lose its validity from the moment of its revocation, and its status shall not in any circumstances be reverted.

5.   Subject to the following conditions, Member States may lay down national rules on temporary suspension of qualified certificates for electronic_seals:

(a)	if a qualified certificate for electronic_seal has been temporarily suspended, that certificate shall lose its validity for the period of suspension;

(b)	the period of suspension shall be clearly indicated in the certificate database and the suspension status shall be visible, during the period of suspension, from the service providing information on the status of the certificate.

6.   The Commission may, by means of implementing acts, establish reference numbers of standards for qualified certificates for electronic_seals. Compliance with the requirements laid down in Annex III shall be presumed where a qualified certificate for electronic_seal meets those standards. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 48(2).