EN   EN 
 
 
 EUROPEAN  
COMMISSION   
Brussels, XXX   
[…](2022) XXX  draft  
 
COMMISSION IMPLEMENTING REGULATION (EU) …/...  
of XXX  
laying down rules for the application of Regulation (EU) 2018/858 of the European 
Parliament and of the Council as regards the secure exchange of data of the certificate of 
conformity in electronic format and read -only access to the certificate of conformi ty,  
and amending Commission Implementing Regulation (EU) 2021/133  
  EN 1  EN COMMISSION IMPLEMENTING REGULATION (EU) …/...  
of XXX  
laying down rules for the application of Regulation (EU) 2018/858 of the European 
Parliament and of the Council as regards the secure exchange of data of the certificate of 
conformity in electronic format and read -only access to the certificate of conformi ty,  
and amending Commission Implementing Regulation (EU) 2021/133  
THE EUROPEAN COMMISSION,  
Having regard to the Treaty on the Functioning of the European Union,  
Having regard to Regulation (EU) 2018/858 of the European Parliament and of the Council of 
30 May 2018 on the approval and market surveillance of motor vehicles and their trailers, and 
of systems, components and separate technical units intended for such vehicles, amending 
Regulations (EC) No 715/2007 and (EC) No 595/2009 and repealing Directive 2 007/46/EC1, 
and in particular Article  37(8), points (b),(d),(e) and (f)  thereof,  
Whereas:  
(1) Implementing  Regulation (EU) 2021/133 laid down a fist set of requirements on the 
format and structure of the data elements of the certificates of conformity  and also 
designate d the European Vehicle and Driving Licence Information System 
(EUCARIS)2 for the exchange of that data.  This Regulation introduces additional 
requirements to notably ensure that the c ertificate of conformity in electronic format  
can be secure ly exchanged  by guarantee ing an appropriate level of data protection  and 
to establish the means to allow approval authorities to provide  read-only access to the 
certificate of conformity . 
(2) In order t o ensure a high level of security  to prevent unauthorised access  and data 
corruption , to guarantee an appropriate level of data protection and avoid duplication 
of exchanged messages and data elements , it is necessary to lay down requirements for 
the applicable electronic  applications and systems used for the exc hange of the Initial 
Vehicle Information (IVI)  messages developed by the European Vehicle and Driving 
Licence Information System ( ‘EUCARIS  system’ ) between manufacturers and 
national access points . 
(3) In order t o ensure th at the right format and structure is used for the IVI messages  for 
the exchange between manufacturers , national access points  and the EUCARIS  
system , a validation process should be laid down for  these messages and data elements 
through their respective web applications and systems used for th e exchange of those 
IVI messages.  
(4) In order to facilitate the access to the structured data of the certificate of conformity in 
electronic forma t, it is necessary to introduce a vehicle -specific unique identifier that 
can easily be found and is present on each vehicle.  
                                                 
1 OJ L 151,  14.6.2018, p. 1.  
2  Consolidated version of the EUCARIS Treaty concerning a European Vehicle and Driving Licence 
Information System (EUCARIS) including the amendments signed by the Parties on 8 June 2017.  EN 2  EN (5) In order to allow approval authorities to provide access to the certificate of conformity 
in electronic format as read -only to the public, requirements should be laid down to 
ensure that such access is supported on the web -applications or systems providing the 
certificate of conformity in electronic format.  
 
(6)  Since Implementi ng Regulation (EU) 2021/133 lays down the requirements on 
composition of the data elements of the certificates of conformity , it is appro priate for 
the purposes of ensuring legal certainty and clarity to amend that Regulation with 
regard changes to  the format and structure of  those data elements so that those 
provisions are contained in the same Regulation. It is therefore necessary to amen d 
Implementing Regulation (EU) 2021/133 to include the e xemption for manufacturers 
of particular vehicle categories and types of vehicle that are produced in small series . 
(7) In order to enable approval authorities, market surveillance authorities and registr ation 
authorities of the Member States as well as manufacturers to make the necessary 
changes to their electronic systems and to prepare for the application of this 
Regulation, the date of application of this Regulation should be deferred.  
(8) The measures pro vided for in this Regulation are in accordance with the opinion of the 
Techni cal Committee – Motor Vehicles , 
HAS ADOPTED THIS REGULATION:  
Article 1  
Requirements for secure data exchange  
 
When exchanging data, manufacturers and national access points shall use a secure local web 
link and Extensible Markup Language (XML) schema structure and principles . 
When exchanging data, M anufacturers and the national access point shall use websites that 
are secured by means of a qualified certificate for website authentication  meeting the 
requirements laid down  in Annex  IV to Regulation (EU) 910/2014  of the European 
Parliament and of the Council3; 
The exchange of messages between manufacturers  and national access point s and within 
European Vehicle and Driving Lice nce Information System  (‘EUCARIS system’)  shall be 
secured using an electronic signature  and data encryption protocols . 
The EUCARIS nominated party for operation  shall provide for validation of the received 
electronic signatures . 
The EUCARIS nominated part y for operation  shall provide for trace ability of the messages 
exchanged through that system by logging information on that exchange and provide the 
means to view and search that information . 
Article 2 
Requirements for a vehicle -specific unique identifier  
                                                 
3  Regulation (EU) No 910/2014 of the European Par liament and of the Council of 23 July 2014 on 
electronic identification and trust services for electronic transactions in the internal market and 
repealing Directive 1999/93/EC (OJ L 257, 28.8.2014, p. 73).  EN 3  EN The vehicle -specific unique identifier  referred to in Article 37(8) , point (d) , of Regulation 
(EU) 2018/858 shall be the vehicle identification number ( ʻVINʼ). 
The VIN shall ] comply with the requirements set out in Part 2 , Section A,  point 2,  of Annex II 
to Commission Implementing Regulation (EU) 2021/5354. 
Article 3 
Read -only access  
1. For the purposes of Article 37( 5) of Regulation (EU) 2018/858,  the approval authorit y of 
each Member State shall provide a read -only access to the certificate of conformity through a 
web-application or system  allowing to access  the structured data of the  certificate of 
conformity in electronic format by using the VIN .  
2. The web -application or system referred to in paragraph  1 shall provide a read -only access 
to the certificate of conformity in electronic format from web -applications or systems set up 
by type -approval authorities in other Member States.  
Article 4 
Amendment to Implementing Regulation (EU) 2021/133  
In Implementin g Regulation (EU) 2021/133, the following Article 3a is inserted:  
'Article 3a 
Exemption for manufacturers of particular vehicle categories and types of vehicle that 
are produced in small series  
By way of derogation from Articles 1 and 2, for manufacturers of particular vehicle categories 
and types of vehicle that are produced in small series  it shall be sufficient to make available 
the data elements of the electronic version of the certificate of conformity by means of manual 
input or through the upload of an IVI XML file.  
Article  5 
Entry into force and application  
This Regulation shall enter into force on the  twentieth  day following that of its publication in 
the Official Journal of the European Union . 
It shall apply from 1  January 2024 .  
However, Article 4  shall apply from 1 January 2023.  
 
This Regulation shall be binding in its entirety and directly applicable in all Member State s. 
 
                                                 
4 Commission Implementing Regulation (EU) 2021/53 5 of 31 March 2021 laying down rules for the 
application of Regulation (EU) 2019/2144 of the European Parliament and of the Council as regards 
uniform procedures and technical specifications for the type -approval of vehicles, and of systems, 
components and  separate technical units intended for such vehicles, as regards their general 
construction characteristics and safety (OJ L 117, 6.4.2021, p. 1 ). EN 4  EN Done at Brussels,  
 For the Commission  
 The President  
 Ursula VON DER LEYEN