eIDAS Regulation · Regulation (EU) No 910/2014
Article 19a
Compare the available Commission, Council and Parliament texts and amendments affecting this article.
Article total: 1 part · 4 Council drafts · 4 Parliament amendments
Removed wording is struck through; added or replacement wording is highlighted.
Institutional text
European Commission proposal
All Commission’s changes to eIDAS RegulationThe wording proposed by the Commission at the start of this legislative file.
Full article with Commission changes
Article with proposed changes
Official consolidated text dated 18 October 2024, with the Commission proposal change affecting this article applied.
Article 19a
Requirements for non-qualified trust service providers
- 1.
A non-qualified trust service provider providing non-qualified trust services shall:
- (a)
have appropriate policies and take corresponding measures to manage legal, business, operational and other direct or indirect risks to the provision of the non-qualified trust service, which shall, notwithstanding Article 21 of Directive (EU) 2022/2555, include at least measures relating to:
- (i)
registration and onboarding procedures for a trust service;
- (ii)
procedural or administrative checks needed to provide trust services;
- (iii)
the management and implementation of trust services;
- (i)
- (b)
notifying the supervisory body, the identifiable affected individuals, the public if it is of public interest and, where applicable, other relevant competent authorities, of any security breaches or disruptions in the provision of the service or the implementation of the measures referred to in point (a) (i), (ii) or (iii), that have a significant impact on the trust service provided or on the personal data maintained therein, without undue delay and in any case no later than 24 hours of having become aware of any security breaches or disruptions.
- (a)
- 1a.
Notifications pursuant to paragraph 1, point (b) of this Article to the supervisory body and, where applicable, to other relevant competent authorities, shall be made through the single-entry point pursuant to Article 23a of Directive (EU) 2022/2555.
- 2.
By 21 May 2025, the Commission shall, by means of implementing acts, establish a list of reference standards and, where necessary, establish specifications and procedures for paragraph 1, point (a), of this Article. Compliance with the requirements laid down in this Article shall be presumed where those standards, specifications and procedures are met. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 48(2).
No standalone Commission wording is mapped to this tracked part. A newly proposed provision may have no earlier text of its own.
Commission source wording and instructions
Article 19a(1a)
Commission proposal
1a. Notifications pursuant to paragraph 1, point (b) of this Article to the supervisory body and, where applicable, to other relevant competent authorities, shall be made through the single-entry point pursuant to Article 23a of Directive (EU) 2022/2555.
Institutional text
Council Presidency texts
Successive Presidency compromise texts. Their inclusion does not imply agreement or adoption.
No Council wording is mapped to this tracked part.
Article in May Presidency compromise Council text
Comparison basis: Existing law (18 October 2024) compared with May Presidency compromise (21 May 2026)
Article 19a
Requirements for non-qualified trust service providers
- 1.
A non-qualified trust service provider providing non-qualified trust services shall:
- (a)
have appropriate policies and take corresponding measures to manage legal, business, operational and other direct or indirect risks to the provision of the non-qualified trust service, which shall, notwithstanding Article 21 of Directive (EU) 2022/2555, include at least measures relating to:
- (i)
registration and onboarding procedures for a trust service;
- (ii)
procedural or administrative checks needed to provide trust services;
- (iii)
the management and implementation of trust services;
- (i)
- (b)
notifying the supervisory body, the identifiable affected individuals, the public if it is of public interest and, where applicable, other relevant competent authorities, of any security breaches or disruptions in the provision of the service or the implementation of the measures referred to in point (a) (i), (ii) or (iii), that have a significant impact on the trust service provided or on the personal data maintained therein, without undue delay and in any case no later than 24 hours of having become aware of any security breaches or disruptions.
- (a)
- 1a.
Notifications pursuant to paragraph 1, point (b) of this Article to the supervisory body and, where applicable, to other relevant competent authorities, shall be made through the national entry point pursuant to Article 23b of Directive (EU) 2022/2555.
- 2.
By 21 May 2025, the Commission shall, by means of implementing acts, establish a list of reference standards and, where necessary, establish specifications and procedures for paragraph 1, point (a), of this Article. Compliance with the requirements laid down in this Article shall be presumed where those standards, specifications and procedures are met. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 48(2).
Article 19a(1a)
May Presidency compromise
1a. Notifications pursuant to paragraph 1, point (b) of this Article to the supervisory body and, where applicable, to other relevant competent authorities, shall be made through the national entry point pursuant to Article 23b of Directive (EU) 2022/2555.;
Article in June Presidency compromise · 10 June Council text
Comparison basis: Existing law (18 October 2024) compared with June Presidency compromise · 10 June (10 June 2026)
Article 19a
Requirements for non-qualified trust service providers
- 1.
A non-qualified trust service provider providing non-qualified trust services shall:
- (a)
have appropriate policies and take corresponding measures to manage legal, business, operational and other direct or indirect risks to the provision of the non-qualified trust service, which shall, notwithstanding Article 21 of Directive (EU) 2022/2555, include at least measures relating to:
- (i)
registration and onboarding procedures for a trust service;
- (ii)
procedural or administrative checks needed to provide trust services;
- (iii)
the management and implementation of trust services;
- (i)
- (b)
notifying the supervisory body, the identifiable affected individuals, the public if it is of public interest and, where applicable, other relevant competent authorities, of any security breaches or disruptions in the provision of the service or the implementation of the measures referred to in point (a) (i), (ii) or (iii), that have a significant impact on the trust service provided or on the personal data maintained therein, without undue delay and in any case no later than 24 hours of having become aware of any security breaches or disruptions.
- (a)
- 1a.
Notifications pursuant to paragraph 1, point (b) of this Article to the supervisory body and, where applicable, to other relevant competent authorities, shall be made through the national entry point pursuant to Article 23b of Directive (EU) 2022/2555.
- 2.
By 21 May 2025, the Commission shall, by means of implementing acts, establish a list of reference standards and, where necessary, establish specifications and procedures for paragraph 1, point (a), of this Article. Compliance with the requirements laid down in this Article shall be presumed where those standards, specifications and procedures are met. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 48(2).
Article 19a(1a)
June Presidency compromise · 10 June
1a. Notifications pursuant to paragraph 1, point (b) of this Article to the supervisory body and, where applicable, to other relevant competent authorities, shall be made through the national entry point pursuant to Article 23b of Directive (EU) 2022/2555.;
Article in June Presidency compromise · 18 June Council text
Comparison basis: Existing law (18 October 2024) compared with June Presidency compromise · 18 June (18 June 2026)
Article 19a
Requirements for non-qualified trust service providers
- 1.
A non-qualified trust service provider providing non-qualified trust services shall:
- (a)
have appropriate policies and take corresponding measures to manage legal, business, operational and other direct or indirect risks to the provision of the non-qualified trust service, which shall, notwithstanding Article 21 of Directive (EU) 2022/2555, include at least measures relating to:
- (i)
registration and onboarding procedures for a trust service;
- (ii)
procedural or administrative checks needed to provide trust services;
- (iii)
the management and implementation of trust services;
- (i)
- (b)
notifying the supervisory body, the identifiable affected individuals, the public if it is of public interest and, where applicable, other relevant competent authorities, of any security breaches or disruptions in the provision of the service or the implementation of the measures referred to in point (a) (i), (ii) or (iii), that have a significant impact on the trust service provided or on the personal data maintained therein, without undue delay and in any case no later than 24 hours of having become aware of any security breaches or disruptions.
- (a)
- 1a.
Notifications pursuant to paragraph 1, point (b) of this Article to the supervisory body and, where applicable, to other relevant competent authorities, shall be made through the national entry point pursuant to Article 23b of Directive (EU) 2022/2555.
- 2.
By 21 May 2025, the Commission shall, by means of implementing acts, establish a list of reference standards and, where necessary, establish specifications and procedures for paragraph 1, point (a), of this Article. Compliance with the requirements laid down in this Article shall be presumed where those standards, specifications and procedures are met. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 48(2).
Article 19a(1a)
June Presidency compromise · 18 June
1a. Notifications pursuant to paragraph 1, point (b) of this Article to the supervisory body and, where applicable, to other relevant competent authorities, shall be made through the national entry point pursuant to Article 23b of Directive (EU) 2022/2555.;
Article in September Presidency compromise Council text
Comparison basis: Existing law (18 October 2024) compared with September Presidency compromise (3 September 2026)
Article 19a
Requirements for non-qualified trust service providers
- 1.
A non-qualified trust service provider providing non-qualified trust services shall:
- (a)
have appropriate policies and take corresponding measures to manage legal, business, operational and other direct or indirect risks to the provision of the non-qualified trust service, which shall, notwithstanding Article 21 of Directive (EU) 2022/2555, include at least measures relating to:
- (i)
registration and onboarding procedures for a trust service;
- (ii)
procedural or administrative checks needed to provide trust services;
- (iii)
the management and implementation of trust services;
- (i)
- (b)
notifying the supervisory body, the identifiable affected individuals, the public if it is of public interest and, where applicable, other relevant competent authorities, of any security breaches or disruptions in the provision of the service or the implementation of the measures referred to in point (a) (i), (ii) or (iii), that have a significant impact on the trust service provided or on the personal data maintained therein, without undue delay and in any case no later than 24 hours of having become aware of any security breaches or disruptions.
- (a)
- 1a.
Notifications pursuant to paragraph 1, point (b) of this Article to the supervisory body and, where applicable, to other relevant competent authorities, shall be supported through the national entry point pursuant to Article 23b of Directive (EU) 2022/2555.
- 2.
By 21 May 2025, the Commission shall, by means of implementing acts, establish a list of reference standards and, where necessary, establish specifications and procedures for paragraph 1, point (a), of this Article. Compliance with the requirements laid down in this Article shall be presumed where those standards, specifications and procedures are met. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 48(2).
Article 19a(1a)
September Presidency compromise
Council wording reconstructed for this provision from the official operation
1a. Notifications pursuant to paragraph 1, point (b) of this Article to the supervisory body and, where applicable, to other relevant competent authorities, shall be supported through the national entry point pursuant to Article 23b of Directive (EU) 2022/2555.
Official source passage and amending instruction
1. in Article 19a, the following paragraph 1a is inserted: ‘1a. Notifications pursuant to paragraph 1, point (b) of this Article to the supervisory body and, where applicable, to other relevant competent authorities, shall be supported through the national entry point pursuant to Article 23b of Directive (EU) 2022/2555.;
Article 19a(1a) 4 Council drafts
Article 19a(1a)
21 May 2026 · May Presidency compromise
1a. Notifications pursuant to paragraph 1, point (b) of this Article to the supervisory body and, where applicable, to other relevant competent authorities, shall be made through the national entry point pursuant to Article 23b of Directive (EU) 2022/2555.;
Article 19a(1a)
10 June 2026 · June Presidency compromise · 10 June
1a. Notifications pursuant to paragraph 1, point (b) of this Article to the supervisory body and, where applicable, to other relevant competent authorities, shall be made through the national entry point pursuant to Article 23b of Directive (EU) 2022/2555.;
Article 19a(1a)
18 June 2026 · June Presidency compromise · 18 June
1a. Notifications pursuant to paragraph 1, point (b) of this Article to the supervisory body and, where applicable, to other relevant competent authorities, shall be made through the national entry point pursuant to Article 23b of Directive (EU) 2022/2555.;
Article 19a(1a)
3 September 2026 · September Presidency compromise
Council wording reconstructed for this provision from the official operation
1a. Notifications pursuant to paragraph 1, point (b) of this Article to the supervisory body and, where applicable, to other relevant competent authorities, shall be supported through the national entry point pursuant to Article 23b of Directive (EU) 2022/2555.
Official source passage and amending instruction
1. in Article 19a, the following paragraph 1a is inserted: ‘1a. Notifications pursuant to paragraph 1, point (b) of this Article to the supervisory body and, where applicable, to other relevant competent authorities, shall be supported through the national entry point pursuant to Article 23b of Directive (EU) 2022/2555.;
Competing proposals
European Parliament amendments
These are alternative tabled amendments. An amendment affecting several tracked parts appears once here, with each target identified.
More filters
Alternative wording Amendment 285 · Daniel Buda JURI
against:
Article 19a
Requirements for non-qualified trust service providers
- 1.
A non-qualified trust service provider providing non-qualified trust services shall:
- (a)
have appropriate policies and take corresponding measures to manage legal, business, operational and other direct or indirect risks to the provision of the non-qualified trust service, which shall, notwithstanding Article 21 of Directive (EU) 2022/2555, include at least measures relating to:
- (i)
registration and onboarding procedures for a trust service;
- (ii)
procedural or administrative checks needed to provide trust services;
- (iii)
the management and implementation of trust services;
- (i)
- (b)
notifying the supervisory body, the identifiable affected individuals, the public if it is of public interest and, where applicable, other relevant competent authorities, of any security breaches or disruptions in the provision of the service or the implementation of the measures referred to in point (a) (i), (ii) or (iii), that have a significant impact on the trust service provided or on the personal data maintained therein, without undue delay and in any case no later than 24 hours of having become aware of any security breaches or disruptions.
- (a)
- 1a.
Notifications pursuant to paragraph 1, point (b) of this Article to the supervisory body and, where applicable, to other relevant competent authorities, shall be made through the
single-entryreportingpointchannelpursuantdesignatedtoby the relevant competent authority or, where the competent Member State has so decided, through the interoperable European framework provided for in Article 23a of Directive (EU) 2022/2555. - 2.
By 21 May 2025, the Commission shall, by means of implementing acts, establish a list of reference standards and, where necessary, establish specifications and procedures for paragraph 1, point (a), of this Article. Compliance with the requirements laid down in this Article shall be presumed where those standards, specifications and procedures are met. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 48(2).
Alternative wording Amendment 518 · Virginie Joron IMCO
against:
Article 19a
Requirements for non-qualified trust service providers
- 1.
A non-qualified trust service provider providing non-qualified trust services shall:
- (a)
have appropriate policies and take corresponding measures to manage legal, business, operational and other direct or indirect risks to the provision of the non-qualified trust service, which shall, notwithstanding Article 21 of Directive (EU) 2022/2555, include at least measures relating to:
- (i)
registration and onboarding procedures for a trust service;
- (ii)
procedural or administrative checks needed to provide trust services;
- (iii)
the management and implementation of trust services;
- (i)
- (b)
notifying the supervisory body, the identifiable affected individuals, the public if it is of public interest and, where applicable, other relevant competent authorities, of any security breaches or disruptions in the provision of the service or the implementation of the measures referred to in point (a) (i), (ii) or (iii), that have a significant impact on the trust service provided or on the personal data maintained therein, without undue delay and in any case no later than 24 hours of having become aware of any security breaches or disruptions.
- (a)
- 1a.
Notifications pursuant to paragraph 1, point (b) of this Article to the supervisory body and, where applicable, to other relevant competent authorities, shall be made
throughby the national single points of entry to the single-entrypointpursuantoftoentry of the European Union, in accordance with Article 23a of Directive (EU) 2022/2555.; - 2.
By 21 May 2025, the Commission shall, by means of implementing acts, establish a list of reference standards and, where necessary, establish specifications and procedures for paragraph 1, point (a), of this Article. Compliance with the requirements laid down in this Article shall be presumed where those standards, specifications and procedures are met. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 48(2).
Remove proposed wording Amendment 1811 · Markus Buchheit ITRE · LIBE
The source names this article, but its precise target scope has not been resolved. Related tracker provisions are not asserted as direct targets.
Article 7
Alternative wording Amendment 1812 · Julie Rechagneux, Mélanie Disdier, Aleksandar Nikolic, Ewa Zajączkowska-Hernik, Pierre-Romain Thionnet, Alexandre Varaut, Fabrice Leggeri, Marion Maréchal, Christophe Bay ITRE · LIBE
against:
Article 19a
Requirements for non-qualified trust service providers
- 1.
A non-qualified trust service provider providing non-qualified trust services shall:
- (a)
have appropriate policies and take corresponding measures to manage legal, business, operational and other direct or indirect risks to the provision of the non-qualified trust service, which shall, notwithstanding Article 21 of Directive (EU) 2022/2555, include at least measures relating to:
- (i)
registration and onboarding procedures for a trust service;
- (ii)
procedural or administrative checks needed to provide trust services;
- (iii)
the management and implementation of trust services;
- (i)
- (b)
notifying the supervisory body, the identifiable affected individuals, the public if it is of public interest and, where applicable, other relevant competent authorities, of any security breaches or disruptions in the provision of the service or the implementation of the measures referred to in point (a) (i), (ii) or (iii), that have a significant impact on the trust service provided or on the personal data maintained therein, without undue delay and in any case no later than 24 hours of having become aware of any security breaches or disruptions.
- (a)
- 1a.
Notifications pursuant to paragraph 1, point (b) of this Article to the supervisory body and, where applicable, to other relevant competent authorities, shall be made
throughby the national single-entry points to the EU single-entry point pursuant to Article 23a of Directive (EU) 2022/2555.; - 2.
By 21 May 2025, the Commission shall, by means of implementing acts, establish a list of reference standards and, where necessary, establish specifications and procedures for paragraph 1, point (a), of this Article. Compliance with the requirements laid down in this Article shall be presumed where those standards, specifications and procedures are met. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 48(2).
No amendments match these filters.
Selected texts
Compare wording
Choose a tracked part and a named pair of texts. Comparisons are offered only where both sides cover the same legal unit.
Select a specific tracked part above to compare wording.
No same-scope comparison is available for this tracked part. Its source wording remains available in the article text sections.
Article 19a(1a)
European Commission proposal → Council Presidency text · ST 9547/26
Changes in context
RemovedAdded
Both texts in full
European Commission proposal
Council Presidency text · ST 9547/26
Article 19a(1a)
Council Presidency text · ST 9547/26 → Council Presidency text · ST 10426/26
Changes in context
RemovedAdded
Both texts in full
Council Presidency text · ST 9547/26
Council Presidency text · ST 10426/26
Article 19a(1a)
Council Presidency text · ST 10426/26 → Council Presidency text · ST 10677/26
Changes in context
RemovedAdded
Both texts in full
Council Presidency text · ST 10426/26
Council Presidency text · ST 10677/26
Article 19a(1a)
Council Presidency text · ST 10677/26 → Council Presidency text · ST 12535/26
Changes in context
RemovedAdded
Both texts in full
Council Presidency text · ST 10677/26
Council Presidency text · ST 12535/26
Article 19a(1a)
Wording reproduced in the amendment → Amendment 1812 · ITRE–LIBE amendments 1741–1840 to the draft report
Changes in context
RemovedAdded
Both texts in full
Wording reproduced in the amendment
Amendment 1812 · ITRE–LIBE amendments 1741–1840 to the draft report
Article 19a(1a)
Wording reproduced in the amendment → Amendment 518 · IMCO amendments 329–532 to the draft opinion
Changes in context
RemovedAdded
Both texts in full
Wording reproduced in the amendment
Amendment 518 · IMCO amendments 329–532 to the draft opinion
Article 19a(1a)
Wording reproduced in the amendment → Amendment 285 · JURI amendments 69–296 to the draft opinion
Changes in context
RemovedAdded