### (11) european digital identity wallets should ensure the highest level of security for the personal data used for authentication irrespective of whether such data is stored locally or on cloud-based solutions , taking into account the different levels of risk. using biometrics to authenticate is one of the identifications methods providing a high level of confidence , in particular when used in combination with other elements of authentication. since biometrics represents a unique characteristic of a person , the use of biometrics requires organisational and security measures , commensurate to the risk that such processing may entail to the rights and freedoms of natural persons and in accordance with regulation 2016/679. ### (11) european digital identity wallets should ensure the highest level of security for the personal data used for authentication irrespective of whether such data is stored locally or on cloud-based solutions , taking into account the different levels of risk. using biometrics to authenticate shall not be a precondition for using european digital identity wallets. since biometrics represents a unique characteristic of a person , the use of biometrics requires organisational and security measures , commensurate to the risk that such processing may entail to the rights and freedoms of natural persons and in accordance with regulation 2016/679.


### (11) european digital identity wallets should ensure the highest level of security for the personal data used for authentication irrespective of whether such data is stored locally or on cloud-based solutions , taking into account the different levels of risk. using biometrics to authenticate is one of the identifications methods providing a high level of confidence , in particular when used in combination with other elements of authentication. since biometrics represents a unique characteristic of a person , the use of biometrics requires organisational and security measures , commensurate to the risk that such processing may entail to the rights and freedoms of natural persons and in accordance with regulation 2016/679. ### (11) european digital identity wallets should ensure the highest level of security for the personal data used for authentication irrespective of whether such data is stored in decentralized locations or on cloud-based solutions , taking into account the different levels of risk. using biometrics to authenticate shall not be a precondition for using the european digital identity wallet , notwithstanding the requirement for strong user authentication. biometric data for the purpose of uniquely identifying a natural person in the context of this regulation should not be stored in the cloud. since biometrics represents a unique characteristic of a person , the use of biometrics requires organisational and security measures , commensurate to the risk that such processing may entail to the rights and freedoms of natural persons and in accordance with regulation 2016/679. storing information from the european digital identity wallet in the cloud has to be an optional feature only active after the user has given explicit consent. where the european digital identity wallet is provided on the smartphone of the user its cryptographic material should be stored in the secure elements of the device.


### (12) to ensure that the european digital identity framework is open to innovation , technological development and future-proof , member states should be encouraged to set-up jointly sandboxes to test innovative solutions in a controlled and secure environment in particular to improve the functionality , protection of personal data , security and interoperability of the solutions and to inform future updates of technical references and legal requirements. this environment should foster the inclusion of european small and medium enterprises , start-ups and individual innovators and researchers. ### deleted


### (12) to ensure that the european digital identity framework is open to innovation , technological development and future-proof , member states should be encouraged to set-up jointly sandboxes to test innovative solutions in a controlled and secure environment in particular to improve the functionality , protection of personal data , security and interoperability of the solutions and to inform future updates of technical references and legal requirements. this environment should foster the inclusion of european small and medium enterprises , start-ups and individual innovators and researchers. ### (12) to ensure that the european digital identity framework is open to innovation , technological development and future-proof , member states should be encouraged to set-up jointly sandboxes to test innovative solutions in a controlled , secure and time-limited environment in particular to improve the functionality , protection of personal data , security and interoperability of the solutions and to inform future updates of technical references and legal requirements. this environment should foster the inclusion of european small and medium enterprises , start-ups and individual innovators and researchers.


### (17) service providers use the identity data provided by the set of person identification data available from electronic identification schemes pursuant to regulation (eu) no 910/2014 in order to match users from another member state with the legal identity of that user. however , despite the use of the eidas data set , in many cases ensuring an accurate match requires additional information about the user and specific unique identification procedures at national level. to further support the usability of electronic identification means , this regulation should require member states to take specific measures to ensure a correct identity match in the process of electronic identification. for the same purpose , this regulation should also extend the mandatory minimum data set and require the use of a unique and persistent electronic identifier in conformity with union law in those cases where it is necessary to legally identify the user upon his/her request in a unique and persistent way. ### (17) service providers use the identity data provided by the set of person identification data available from electronic identification schemes pursuant to regulation (eu) no 910/2014 in order to match users from another member state with the legal identity of that user. however , despite the use of the eidas data set , in many cases ensuring an accurate match requires additional information about the user and specific unique identification procedures at national level. to further support the usability of electronic identification means , this regulation should require member states to take specific measures to ensure a correct identity match in the process of electronic identification.


### (27) any entity that collects , creates and issues attested attributes such as diplomas , licences , certificates of birth should be able to become a provider of electronic attestation of attributes. relying parties should use the electronic attestations of attributes as equivalent to attestations in paper format. therefore , an electronic attestation of attributes should not be denied legal effect on the grounds that it is in an electronic form or that it does not meet the requirements of the qualified electronic attestation of attributes. to that effect , general requirements should be laid down to ensure that a qualified electronic attestation of attributes has the equivalent legal effect of lawfully issued attestations in paper form. however , those requirements should apply without prejudice to union or national law defining additional sector specific requirements as regards form with underlying legal effects and , in particular , the cross-border recognition of qualified electronic attestation of attributes , where appropriate. ### (27) any entity that collects , creates and issues attested attributes such as diplomas , licences , certificates of birth should be able to become a provider of electronic attestation of attributes. relying parties should use the electronic attestations of attributes as equivalent to attestations in paper format. therefore , an electronic attestation of attributes should not be denied legal effect solely on the grounds that it is in an electronic form or that it does not meet the requirements of the qualified electronic attestation of attributes. to that effect , general requirements should be laid down to ensure that a qualified electronic attestation of attributes has the equivalent legal effect of lawfully issued attestations in paper form. nevertheless , lawfully insured attestations in paper form shall be accepted by relying parties as an alternative to electronic attestation of attributes. however , those requirements should apply without prejudice to union or national law defining additional sector specific requirements as regards form with underlying legal effects and , in particular , the cross-border recognition of qualified electronic attestation of attributes , where appropriate.


### (27) any entity that collects , creates and issues attested attributes such as diplomas , licences , certificates of birth should be able to become a provider of electronic attestation of attributes. relying parties should use the electronic attestations of attributes as equivalent to attestations in paper format. therefore , an electronic attestation of attributes should not be denied legal effect on the grounds that it is in an electronic form or that it does not meet the requirements of the qualified electronic attestation of attributes. to that effect , general requirements should be laid down to ensure that a qualified electronic attestation of attributes has the equivalent legal effect of lawfully issued attestations in paper form. however , those requirements should apply without prejudice to union or national law defining additional sector specific requirements as regards form with underlying legal effects and , in particular , the cross-border recognition of qualified electronic attestation of attributes , where appropriate. ### (27) any entity that collects , creates and issues attested attributes such as diplomas , licences , certificates of birth should be able to become a provider of electronic attestation of attributes. relying parties should use the electronic attestations of attributes as equivalent to attestations in paper format. therefore , an electronic attestation of attributes should not be denied legal effect on the grounds that it is in an electronic form or that it does not meet the requirements of the qualified electronic attestation of attributes. to that effect , general requirements should be laid down to ensure that a qualified electronic attestation of attributes has the equivalent legal effect of lawfully issued attestations in paper form. nevertheless , lawfully issued attestations in paper form shall be accepted by relying parties as an alternative to electronic attestation of attributes. however , those requirements should apply without prejudice to union or national law defining additional sector specific requirements as regards form with underlying legal effects and , in particular , the cross-border recognition of qualified electronic attestation of attributes , where appropriate.


### (28) wide availability and usability of the european digital identity wallets require their acceptance by private service providers. private relying parties providing services in the areas of transport , energy , banking and financial services , social security , health , drinking water , postal services , digital infrastructure , education or telecommunications should accept the use of european digital identity wallets for the provision of services where strong user authentication for online identification is required by national or union law or by contractual obligation. where very large online platforms as defined in article 25.1. of regulation [reference dsa regulation] require users to authenticate to access online services , those platforms should be mandated to accept the use of european digital identity wallets upon voluntary request of the user. users should be under no obligation to use the wallet to access private services , but if they wish to do so , large online platforms should accept the european digital identity wallet for this purpose while respecting the principle of data minimisation. given the importance of very large online platforms , due to their reach , in particular as expressed in number of recipients of the service and economic transactions this is necessary to increase the protection of users from fraud and secure a high level of data protection. self-regulatory codes of conduct at union level (‘codes of conduct’) should be developed in order to contribute to wide availability and usability of electronic identification means including european digital identity wallets within the scope of this regulation. the codes of conduct should facilitate wide acceptance of electronic identification means including european digital identity wallets by those service providers which do not qualify as very large platforms and which rely on third party electronic identification services for user authentication. they should be developed within 12 months of the adoption of this regulation. the commission should assess the effectiveness of these provisions for the availability and usability for the user of the european digital identity wallets after 18 months of their deployment and revise the provisions to ensure their acceptance by means of delegated acts in the light of this assessment. ### (28) wide availability and usability of the european digital identity wallets require their acceptance and trust by citizens' as an acceptable means to share their personal data with private service providers. private relying parties providing services in the areas of transport , energy , banking and financial services , social security , health , drinking water , postal services , digital infrastructure , education or telecommunications should accept the use of european digital identity wallets for the provision of services where strong user authentication for online identification is required by national or union law. users should be under no obligation to use the wallet to access private services , but if they wish to do so , large online platforms should accept the european digital identity wallet for this purpose while respecting the principle of data minimisation. self-regulatory codes of conduct at union level (‘codes of conduct’) should be developed in order to contribute to wide availability and usability of electronic identification means including european digital identity wallets within the scope of this regulation. the codes of conduct should facilitate wide acceptance of electronic identification means including european digital identity wallets by those service providers which do not qualify as very large platforms and which rely on third party electronic identification services for user authentication. they should be developed within 12 months of the adoption of this regulation. the commission should assess the effectiveness of these provisions for the availability and usability for the user of the european digital identity wallets after 18 months of their deployment and revise the provisions to ensure their acceptance by means of delegated acts in the light of this assessment.


### (28) wide availability and usability of the european digital identity wallets require their acceptance by private service providers. private relying parties providing services in the areas of transport , energy , banking and financial services , social security , health , drinking water , postal services , digital infrastructure , education or telecommunications should accept the use of european digital identity wallets for the provision of services where strong user authentication for online identification is required by national or union law or by contractual obligation. where very large online platforms as defined in article 25.1. of regulation [reference dsa regulation] require users to authenticate to access online services , those platforms should be mandated to accept the use of european digital identity wallets upon voluntary request of the user. users should be under no obligation to use the wallet to access private services , but if they wish to do so , large online platforms should accept the european digital identity wallet for this purpose while respecting the principle of data minimisation. given the importance of very large online platforms , due to their reach , in particular as expressed in number of recipients of the service and economic transactions this is necessary to increase the protection of users from fraud and secure a high level of data protection. self-regulatory codes of conduct at union level (‘codes of conduct’) should be developed in order to contribute to wide availability and usability of electronic identification means including european digital identity wallets within the scope of this regulation. the codes of conduct should facilitate wide acceptance of electronic identification means including european digital identity wallets by those service providers which do not qualify as very large platforms and which rely on third party electronic identification services for user authentication. they should be developed within 12 months of the adoption of this regulation. the commission should assess the effectiveness of these provisions for the availability and usability for the user of the european digital identity wallets after 18 months of their deployment and revise the provisions to ensure their acceptance by means of delegated acts in the light of this assessment. ### (28) wide availability and usability of the european digital identity wallets require their acceptance by citizens as a trusted means of sharing their personal data with private service providers. private relying parties providing services in the areas of transport , energy , banking and financial services , social security , health , drinking water , postal services , digital infrastructure , education or telecommunications should accept the use of european digital identity wallets for the provision of services where strong user authentication for online identification is required by national or union law. the information requested from the user via the european digital identity wallet has to be necessary and proportionate for the intended use case of the relying party and follow the principle of data minimisation , ensuring transparency over what data is shared and for what purposes and increasing the “least-privileged” data request practices. unless specific rules of union or national law require users to identify themselves for legal purposes , the use of services anonymously or under a pseudonym should be allowed. where very large online platforms as defined in article 25.1. of regulation [reference dsa regulation] require users to authenticate to access online services , those platforms should be mandated to accept the use of european digital identity wallets upon voluntary request of the user. users should be under no obligation to use the wallet to access private services and should not be restricted or hindered on account of not using the wallet , but if users wish to do so , large online platforms should accept the european digital identity wallet for this purpose while respecting the principle of data minimisation. given the importance of very large online platforms , due to their reach , in particular as expressed in number of recipients of the service and economic transactions this is necessary to increase the protection of users from fraud and secure a high level of data protection. self-regulatory codes of conduct at union level (‘codes of conduct’) should be developed in order to contribute to wide availability and usability of electronic identification means including european digital identity wallets within the scope of this regulation. the codes of conduct should facilitate wide acceptance of electronic identification means including european digital identity wallets by those service providers which do not qualify as very large platforms and which rely on third party electronic identification services for user authentication. they should be developed within 12 months of the adoption of this regulation. the commission should assess the effectiveness of these provisions for the availability and usability for the user of the european digital identity wallets after 18 months of their deployment and revise the provisions to ensure their acceptance by means of delegated acts in the light of this assessment.


### (29) the european digital identity wallet should technically enable the selective disclosure of attributes to relying parties. this feature should become a basic design feature thereby reinforcing convenience and personal data protection including minimisation of processing of personal data. ### (29) the european digital identity wallet should be based on privacy by design principle , and should technically enable the selective disclosure of attributes to relying parties in a secure and user-friendly manner. open source , decentralized storage and privacy by design should become key design features of the european digital identity wallet thereby reinforcing user control , convenience and personal data protection including minimisation of processing of personal data. the setting by default should have all attributes un-pre-selected; users should decide which attributes they allow which relying parties to access to , with the exception of health data to be strictly limited to health parties. mechanisms for the validation of the european digital identity wallet , selective disclosures and authentication of users to access online services shall be privacy-preserving thereby preventing the tracking of the user and respecting the principle of purpose limitation , which implies a right to pseudonymity to ensure the user cannot be linked across several relying parties.


### (32) website authentication services provide users with assurance that there is a genuine and legitimate entity standing behind the website. those services contribute to the building of trust and confidence in conducting business online , as users will have confidence in a website that has been authenticated. the use of website authentication services by websites is voluntary. however , in order for website authentication to become a means to increasing trust , providing a better experience for the user and furthering growth in the internal market , this regulation lays down minimal security and liability obligations for the providers of website authentication services and their services. to that end , web-browsers should ensure support and interoperability with qualified certificates for website authentication pursuant to regulation (eu) no 910/2014. they should recognise and display qualified certificates for website authentication to provide a high level of assurance , allowing website owners to assert their identity as owners of a website and users to identify the website owners with a high degree of certainty. to further promote their usage , public authorities in member states should consider incorporating qualified certificates for website authentication in their websites. ### deleted


### (33) many member states have introduced national requirements for services providing secure and trustworthy digital archiving in order to allow for the long term preservation of electronic documents and associated trust services. to ensure legal certainty and trust , it is essential to provide a legal framework to facilitate the cross border recognition of qualified electronic archiving services. that framework could also open new market opportunities for union trust service providers. ### deleted


### (34) qualified electronic ledgers record data in a manner that ensures the uniqueness , authenticity and correct sequencing of data entries in a tamper proof manner. an electronic ledger combines the effect of time stamping of data with certainty about the data originator similar to e-signing and has the additional benefit of enabling more decentralised governance models that are suitable for multi-party co-operations. for example , it creates a reliable audit trail for the provenance of commodities in cross-border trade , supports the protection of intellectual property rights , enables flexibility markets in electricity , provides the basis for advanced solutions for self-sovereign identity and supports more efficient and transformative public services. to prevent fragmentation of the internal market , it is important to define a pan-european legal framework that allows for the cross-border recognition of trust services for the recording of data in electronic ledgers. ### deleted


### (35) the certification as qualified trust service providers should provide legal certainty for use cases that build on electronic ledgers. this trust service for electronic ledgers and qualified electronic ledgers and the certification as qualified trust service provider for electronic ledgers should be notwithstanding the need for use cases to comply with union law or national law in compliance with union law. use cases that involve the processing of personal data must comply with regulation (eu) 2016/679. use cases that involve crypto assets should be compatible with all applicable financial rules for example with the markets in financial instruments directive23 , the payment services directive24 and the future markets in crypto assets regulation25 . ### (35) use cases that involve the processing of personal data must comply with regulation (eu) 2016/679. use cases that involve crypto assets should be compatible with all applicable financial rules for example with the markets in financial instruments directive23 , the payment services directive24 and the future markets in crypto assets regulation25 .


### (36) in order to avoid fragmentation and barriers , due to diverging standards and technical restrictions , and to ensure a coordinated process to avoid endangering the implementation of the future european digital identity framework , a process for close and structured cooperation between the commission , member states and the private sector is needed. to achieve this objective , member states should cooperate within the framework set out in the commission recommendation xxx/xxxx [toolbox for a coordinated approach towards a european digital identity framework]26 to identify a toolbox for a european digital identity framework. the toolbox should include a comprehensive technical architecture and reference framework , a set of common standards and technical references and a set of guidelines and descriptions of best practices covering at least all aspects of the functionalities and interoperability of the european digital identity wallets including esignatures and of the qualified trust service for attestation of attributes as laid out in this regulation. in this context , member states should also reach agreement on common elements of a business model and fee structure of the european digital identity wallets , to facilitate take up , in particular by small and medium sized companies in a cross-border context. the content of the toolbox should evolve in parallel with and reflect the outcome of the discussion and process of adoption of the european digital identity framework. ### (36) in order to avoid fragmentation and barriers , due to diverging standards and technical restrictions , and to ensure a coordinated process to avoid endangering the implementation of the future european digital identity framework , a process for close and structured cooperation between the commission , member states and the private sector is needed. to achieve this objective , member states should cooperate within the framework set out in the commission recommendation xxx/xxxx [toolbox for a coordinated approach towards a european digital identity framework]26 to identify a toolbox for a european digital identity framework. the toolbox should include a comprehensive technical architecture and reference framework for the decentralised self sovereign architecture of the european digital identity wallet , a set of common standards and technical references and a set of guidelines and descriptions of best practices covering at least all aspects of the functionalities and interoperability of the european digital identity wallets including esignatures and of the qualified trust service for attestation of attributes as laid out in this regulation. in this context , member states should also reach agreement on common elements of a business model and fee structure of the european digital identity wallets , to facilitate take up , in particular by small and medium sized companies in a cross-border context. the content of the toolbox should evolve in parallel with and reflect the outcome of the discussion and process of adoption of the european digital identity framework.


### establishes a legal framework for electronic signatures , electronic seals , electronic time stamps , electronic documents , electronic registered delivery services , certificate services for website authentication , electronic archiving and electronic attestation of attributes , the management of remote electronic signature and seal creation devices , and electronic ledgers; ### establishes a legal framework for electronic signatures , electronic seals , electronic time stamps , electronic documents , electronic registered delivery services , certificate services for website authentication , electronic archiving and electronic attestation of attributes , the management of remote electronic signature and seal creation devices;


### (14) ‘certificate for electronic signature’ means an electronic attestation or set of attestations which links electronic signature validation data to a natural person and confirms at least the name or the pseudonym of that person;; ### (14) ‘certificate for electronic signature’ means an electronic attestation which links electronic signature validation data to a natural person and confirms at least the name or the pseudonym of that person;;


### (29) ‘certificate for electronic seal’ means an electronic attestation or set of attestations that links electronic seal validation data to a legal person and confirms the name of that person;; ### (29) ‘certificate for electronic seal’ means an electronic attestation or set of attestations that links electronic seal validation data to a legal person and confirms the name or pseudonym of that person;;


### (29) ‘certificate for electronic seal’ means an electronic attestation or set of attestations that links electronic seal validation data to a legal person and confirms the name of that person;; ### (29) ‘certificate for electronic seal’ means an electronic attestation or set of attestations that links electronic seal validation data to a legal person and confirms the name or the pseudonym of that person;;


### (53) ‘electronic ledger’ means a tamper proof electronic record of data , providing authenticity and integrity of the data it contains , accuracy of their date and time , and of their chronological ordering; ### deleted


### (55) ‘unique identification’ means a process where person identification data or person identification means are matched with or linked to an existing account belonging to the same person.’; ### deleted


### (42) ‘european digital identity wallet’ is a product and service that allows the user to store identity data , credentials and attributes linked to her/his identity , to provide them to relying parties on request and to use them for authentication , online and offline , for a service in accordance with article 6a; and to create qualified electronic signatures and seals; ### (42) ‘european digital identity wallet’ means a software product and service that allows the user to manage and to locally store identity data , credentials and attributes linked to her/his identity , to provide them to relying parties on request and to use them for identification and authentication , online and offline , for a service in accordance with article 6a; and to create qualified electronic signatures and seals;


### (43) ‘attribute’ is a feature , characteristic or quality of a natural or legal person or of an entity , in electronic form; ### (43) ‘attribute’ means an electronic representation of a feature , characteristic or quality of a natural or legal person or of an entity , in electronic form;


### (46) ‘authentic source’ is a repository or system , held under the responsibility of a public sector body or private entity , that contains attributes about a natural or legal person and is considered to be the primary source of that information or recognised as authentic in national law; ### (46) ‘authentic source’ is a repository or system , held under the responsibility of a public sector body or private entity , that contains attributes , and is responsible for revoking them , about a natural or legal person and is considered to be the primary source of that information or recognised as authentic in union and national law;


### (47) ‘electronic archiving’ means a service ensuring the receipt , storage , deletion and transmission of electronic data or documents in order to guarantee their integrity , the accuracy of their origin and legal features throughout the conservation period; ### (47) ‘electronic archiving’ means a service ensuring the receipt , storage , deletion and transmission of electronic data or documents or the digitization of physical documents in order to guarantee their integrity , the accuracy of their origin and legal features throughout the conservation period;


### without prejudice to the legal effect given to pseudonyms under national law , the use of pseudonyms in electronic transactions shall not be prohibited.; ### without prejudice to the legal effect given to pseudonyms under national law , the use of pseudonyms in electronic transactions shall not be prohibited , and the use of pseudonyms shall always be an option under this regulation.


### without prejudice to the legal effect given to pseudonyms under national law , the use of pseudonyms in electronic transactions shall not be prohibited.; ### processing of personal data shall be carried out in accordance with regulation (eu) 2016/679 , in particular by implementing the principles of data minimisation , purpose limitation , and data protection by design and by default. without prejudice to the legal effect given to pseudonyms and self sovereign identities under national law , their use in electronic transactions shall not be restricted or prohibited and shall always be an option under this regulation.;


### provide a mechanism to ensure that the relying party is able to authenticate the user and to receive electronic attestations of attributes; ### provide a mechanism to ensure that the relying party is able to authenticate the user or to receive electronic attestations of attributes; where attestations of attributes are adequate for the purposes of the relying party , no prior electronic authentication or identification shall take place;


### ensure that the person identification data referred to in articles 12(4) , point (d) uniquely and persistently represent the natural or legal person is associated with it. ### deleted


### 6. the european digital identity wallets shall be issued under a notified electronic identification scheme of level of assurance ‘high’. the use of the european digital identity wallets shall be free of charge to natural persons. ### 6. the european digital identity wallets shall be issued under a notified electronic identification scheme of level of assurance ‘high’. the use of the european digital identity wallets shall be free of charge to natural persons. access to government or other essential services , the labour market and freedom obtain goods and services shall not be restricted or hindered for natural persons not using the european digital identity wallet.


### 1. where relying parties intend to rely upon european digital identity wallets issued in accordance with this regulation , they shall communicate it to the member state where the relying party is established to ensure compliance with requirements set out in union law or national law for the provision of specific services. when communicating their intention to rely on european digital identity wallets , they shall also inform about the intended use of the european digital identity wallet. ### 1. where relying parties intend to rely upon european digital identity wallets issued in accordance with this regulation , they shall request approval from the member state where the relying party is established to ensure compliance of their intended use and the information they intend to request with requirements set out in union law or national law for the provision of specific services.


### 2. member states shall implement a common mechanism for the authentication of relying parties ### 2. member states shall implement a common mechanism and unique identification for the authentication of relying parties. member states may revoke the authorization of relying parties in case of illegal or fraudulent use of the european digital identity wallet in their country.


### securely request and obtain , store , select , combine and share , in a manner that is transparent to and traceable by the user , the necessary legal person identification data and electronic attestation of attributes to authenticate online and offline in order to use online public and private services; ### securely request and obtain , store , select , combine and share , in a manner that is managed by , user-friendly , transparent to and traceable by the user , the necessary legal person identification data , credentials and electronic attestation of attributes to identify and authenticate online and offline in order to use online public and private services;


### 4. digital identity wallets shall , in particular: ### 4. european digital identity wallets shall , in particular:


### provide a mechanism to ensure that the relying party is able to authenticate the user and to receive electronic attestations of attributes; ### provide a mechanism to ensure that the relying party is able to authenticate the user or to receive electronic attestations of attributes in the form of selective disclosures that are unlikable to the user and minimise the processing of personal data. where attestations of attributes are adequate for the purposes of the relying party , no prior electronic authentication or identification shall take place;


### to allow relying parties to verify that the attestations of attributes are valid; ### to allow qualified trust service providers to verify the authenticity and validity of attributed person identification data;


### 6. the european digital identity wallets shall be issued under a notified electronic identification scheme of level of assurance ‘high’. the use of the european digital identity wallets shall be free of charge to natural persons. ### 6. the european digital identity wallets shall be issued under a notified electronic identification scheme of level of assurance ‘high’. the use of the european digital identity wallets shall be on a voluntary basis and free of charge to all users. access to government services , government-funded services , essential services , labour or business rights of individuals as well as freedom to obtain goods and services shall not be restricted or hindered for natural persons not using the european digital identity wallet;


### 7. the user shall be in full control of the european digital identity wallet. the issuer of the european digital identity wallet shall not collect information about the use of the wallet which are not necessary for the provision of the wallet services , nor shall it combine person identification data and any other personal data stored or relating to the use of the european digital identity wallet with personal data from any other services offered by this issuer or from third-party services which are not necessary for the provision of the wallet services , unless the user has expressly requested it. personal data relating to the provision of european digital identity wallets shall be kept physically and logically separate from any other data held. if the european digital identity wallet is provided by private parties in accordance to paragraph 1 (b) and (c) , the provisions of article 45f paragraph 4 shall apply mutatis mutandis. ### 7. the user shall be in full control of the european digital identity wallet and its own data. the technical architecture shall make it impossible for the issuer of the european digital identity wallet or third-party services connected to them or the member state to collect or obtain information about the use of the wallet by the user. the exchange of information via the european digital identity wallet shall not allow to providers of electronic attestation of attributes to track , link , correlate or otherwise obtain knowledge of transactions or user behaviour. personal data relating to the provision of european digital identity wallets shall be kept physically and logically separate from any other data held. if the european digital identity wallet is provided by private parties in accordance to paragraph 1 (b) and (c) , the provisions of article 45f paragraph 4 shall apply mutatis mutandis. proxies that act as intermediaries between relying parties and european digital identity wallets shall not obtain knowledge about the contents of the transaction.


### 10. the european digital identity wallet shall be made accessible for persons with disabilities in accordance with the accessibility requirements of annex i to directive 2019/882. ### 10. the european digital identity wallet shall be made accessible for persons with disabilities , including vulnerable persons , persons who experience functional limitations , such as elderly persons , and persons with limited access to digital technologies in accordance with the accessibility requirements of annex i to directive 2019/882 and the united nations convention on the rights of persons with disabilities. the use of the european digital identity wallet shall be offered under the same conditions as offline services require. these persons should be able if necessary to have a trusted third party in charge of using their european digital identity wallets on their behalf , upon designation by a judicial authority.


### 1. where relying parties intend to rely upon european digital identity wallets issued in accordance with this regulation , they shall communicate it to the member state where the relying party is established to ensure compliance with requirements set out in union law or national law for the provision of specific services. when communicating their intention to rely on european digital identity wallets , they shall also inform about the intended use of the european digital identity wallet. ### 1. where relying parties intend to rely upon european digital identity wallets issued in accordance with this regulation , they shall request approval from the member state where the relying party is established to ensure compliance with requirements set out in union law or national law for the provision of specific services. when communicating their intention to rely on european digital identity wallets , they shall also inform competent national authority about the intended use of the european digital identity wallet and the data they intend to request.


### 2. member states shall implement a common mechanism for the authentication of relying parties ### 2. member states shall implement a common mechanism for the authentication of relying parties. member states may revoke the authorization of relying parties in case of illegal or fraudulent use of the european digital identity wallet in their country.


### 3. relying parties shall be responsible for carrying out the procedure for authenticating person identification data and electronic attestation of attributes originating from european digital identity wallets. ### 3. relying parties shall be responsible for communicating their unique identifier in every interaction with the european digital identity wallet an carrying out the procedure for authenticating person identification data and electronic attestation of attributes originating from european digital identity wallets. the user shall be able to refuse to continue without any coercion , and without being discriminated against.


### (12) the following article 11a is inserted: ### deleted


### a reference to a minimum set of person identification data necessary to uniquely and persistently represent a natural or legal person;; ### a reference to a minimum set of person identification data uniquely representing a natural or legal person , which is available from electronic identification schemes;


### the exchange of information , experience and good practice as regards electronic identification schemes and in particular technical requirements related to interoperability , unique identification and assurance levels;; ### the exchange of information , experience and good practice as regards electronic identification schemes and in particular technical requirements related to interoperability and assurance levels;;


### 2. where private relying parties providing services are required by national or union law , to use strong user authentication for online identification , or where strong user authentication is required by contractual obligation , including in the areas of transport , energy , banking and financial services , social security , health , drinking water , postal services , digital infrastructure , education or telecommunications , private relying parties shall also accept the use of european digital identity wallets issued in accordance with article 6a. ### 2. where private relying parties providing services are required by national or union law , to use strong user authentication for online identification , they shall also accept the use of european digital identity wallets issued in accordance with article 6a.


### 3. where very large online platforms as defined in regulation [reference dsa regulation] article 25.1. require users to authenticate to access online services , they shall also accept the use of european digital identity wallets issued in accordance with article 6a strictly upon voluntary request of the user and in respect of the minimum attributes necessary for the specific online service for which authentication is requested , such as proof of age. ### 3. where very large online platforms as defined in regulation [reference dsa regulation] article 25.1. require users to authenticate to access online services , they shall also accept the use of european digital identity wallets issued in accordance with article 6a strictly upon voluntary request of the user and in respect of the minimum attributes necessary for the specific online service for which authentication is requested , such as proof of age. in this case , revocable pseudonyms can be generated and used in connection to an identifiable european digital identity wallets.


### 3. where very large online platforms as defined in regulation [reference dsa regulation] article 25.1. require users to authenticate to access online services , they shall also accept the use of european digital identity wallets issued in accordance with article 6a strictly upon voluntary request of the user and in respect of the minimum attributes necessary for the specific online service for which authentication is requested , such as proof of age. ### 3. where very large online platforms as defined in regulation [reference dsa regulation] article 25.1. require users to authenticate to access online services , they shall also accept the use of european digital identity wallets issued in accordance with article 6a strictly upon voluntary request of the user and in respect of the minimum attributes necessary for the specific online service for which authentication is requested , such as proof of age. in this case , revocable pseudonyms can be generated and used in connection to an identifiable european digital identity wallets. the combination of person identification data and any other personal data and identifiers linked to the european digital identity wallets with personal or non-personal data from any other services which are not necessary for the provision of the authentication or use of core services , is prohibited unless the user has expressly requested it.


### to inform the relevant national competent authorities of the member states concerned , designated pursuant to directive (eu) xxxx/xxxx [nis2] , of any significant breaches of security or loss of integrity they become aware of in the performance of their tasks. where the significant breach of security or loss of integrity concerns other member states , the supervisory body shall inform the single point of contact of the member state concerned designated pursuant to directive (eu) xxxx/xxxx (nis2);; ### to inform the relevant national competent authorities of the member states concerned , designated pursuant to directive (eu) xxxx/xxxx [nis2] , of any breaches of security or loss of integrity they become aware of in the performance of their tasks. where the breach of security or loss of integrity concerns other member states , the supervisory body shall inform the single point of contact of the member state concerned designated pursuant to directive (eu) xxxx/xxxx (nis2);;


### where personal data protection rules appear to have been breached , the supervisory body shall inform the supervisory authorities under regulation (eu) 2016/679 of the results of its audits.; ### where personal data protection rules appear to have been breached , the supervisory body shall send immediate notification to inform the supervisory authorities under regulation (eu) 2016/679 and the issuer of the european digital identity wallet regardless of whether the audit has been finished or is still ongoing , and of the results of its audits once done.;


### (38) article 45 is replaced by the following: ### deleted


### 1. an electronic attestation of attributes shall not be denied legal effect and admissibility as evidence in legal proceedings solely on the grounds that it is in electronic form. ### 1. an electronic attestation of attributes shall not be denied legal effect and admissibility as evidence in legal proceedings solely on the grounds that it is in electronic form or that it does not meet the requirements for qualified electronic attestations of attributes.


### section 11 ### deleted


### electronic ledgers ### deleted


### article 45h ### deleted


### legal effects of electronic ledgers ### deleted


### 1. an electronic ledger shall not be denied legal effect and admissibility as evidence in legal proceedings solely on the grounds that it is in an electronic form or that it does not meet the requirements for qualified electronic ledgers. ### deleted


### 2. a qualified electronic ledger shall enjoy the presumption of the uniqueness and authenticity of the data it contains , of the accuracy of their date and time , and of their sequential chronological ordering within the ledger. ### deleted


### article 45i ### deleted


### requirements for qualified electronic ledgers ### deleted


### 1. qualified electronic ledgers shall meet the following requirements: ### deleted


### 2. compliance with the requirements laid down in paragraph 1 shall be presumed where an electronic ledger meets the standards referred to in paragraph 3. ### deleted


### 3. the commission may , by means of implementing acts , establish reference numbers of standards for the processes of execution and registration of a set of data into , and the creation , of a qualified electronic ledger. those implementing acts shall be adopted in accordance with the examination procedure referred to in article 48(2).; ### deleted


### 1. member states shall ensure the collection of statistics in relation to the functioning of the european digital identity wallets and the qualified trust services. ### 1. member states shall ensure the collection of statistics in relation to the functioning of the european digital identity wallets and the qualified trust services including the number of rejected applications including their reasoning.


### 1. member states shall ensure the collection of statistics in relation to the functioning of the european digital identity wallets and the qualified trust services. ### 1. member states shall ensure the collection of statistics in relation to the functioning of the european digital identity wallets and the qualified trust services as well as the number of rejected applications including their justification.


### (41) ‘validation’ means the process of verifying and confirming that an electronic signature or a seal or person identification data or an electronic attestation of attributes is valid; ### (41) validation' means the process of verifying and confirming origin and integrity of:


### in paragraph 3 , points (c) and (d) are deleted; ### in paragraph 3 , point (d) is replaced by the following:


### (5) in the context of political advertising , targeting techniques are frequently used. targeting or amplification techniques should be understood as techniques that are used either to address a tailored political advertisement only to a specific person or group of persons or to increase the circulation , reach or visibility of a political advertisement. given the power and the potential for the misuse of personal data of targeting , including through microtargeting and other advanced techniques , such techniques may present particular threats to legitimate public interests , such as fairness , equal opportunities and transparency in the electoral process and the fundamental right to be informed in an objective , transparent and pluralistic way. ### (5) in the context of political advertising , targeting techniques are frequently used. targeting or amplification techniques should be understood as techniques that are used either to address a tailored political advertisement only to a specific person or group of persons or to increase the circulation , reach or visibility of a political advertisement. through the power and the potential for the misuse of personal data of targeting , including through microtargeting and other advanced techniques , such techniques have been used to distort electoral or consultation process. they present particular threats to legitimate public interests , such as fairness , equal opportunities and transparency in the electoral process and the fundamental right to be informed in an objective , transparent and pluralistic way. such techniques , and their impact on the framing of the public debate should be closely monitored. therefore , they should be considered as 'high-risk ai systems' under the artificial intelligence act


### (6) political advertising is currently regulated heterogeneously in the member states , which in many cases tends to focus on traditional media forms. specific restrictions exist including on cross-border provisions of political advertising services. some member states prohibit eu service providers established in other member states from providing services of a political nature or with a political purpose during electoral periods. at the same time , gaps and loopholes in national legislation are likely to exist in some member states resulting in political advertising sometimes being disseminated without regard to relevant national rules and thus risking undermining the objective of transparency regulation for political advertising. ### (6) elections and referendums have already been distorted and political advertising is currently regulated heterogeneously in the member states , which in many cases tends to focus on traditional media forms. specific restrictions exist including on cross-border provisions of political advertising services. some member states prohibit eu service providers established in other member states from providing services of a political nature or with a political purpose during electoral periods. at the same time , gaps and loopholes in national legislation are likely to exist in some member states resulting in political advertising sometimes being disseminated without regard to relevant national rules and thus risking undermining the objective of transparency regulation for political advertising.


### (11) member states should not maintain or introduce , in their national laws , provisions diverging from those laid down in this regulation , in particular more or less stringent provisions to ensure a different level of transparency in political advertising. full harmonisation of the transparency requirements linked to political advertisement increases legal certainty and reduces the fragmentation of the obligations that service providers meet in the context of political advertising. ### (11) member states should not maintain or introduce , in their national laws , provisions diverging from those laid down in this regulation , in particular less stringent provisions to ensure a different level of transparency in political advertising. full harmonisation of the transparency requirements linked to political advertisement increases legal certainty and reduces the fragmentation of the obligations that service providers meet in the context of political advertising.


### (14) the regulation should provide for harmonised transparency requirement applicable to economic actors providing political advertising and related services (i.e. activities that are normally provided for remuneration); those services consist in particular of the preparation , placement , promotion , publication and dissemination of political advertising. the rules of this regulation that provide for a high level of transparency of political advertising services are based on article 114 of the tfeu. this regulation should also address the use of targeting and amplification techniques in the context of the publication , dissemination or promotion of political advertising that involve the processing of personal data. the rules of this regulation that address the use of targeting and amplification are based on article 16 of the tfeu. political advertising directed to individuals in a member state should include advertising entirely prepared , placed or published by service providers established outside the union but disseminated to individuals in the union. to determine whether a political advertisement is directed to individuals in a member state , account should be taken of factors linking it to that member state , including language , context , objective of the advertisement and its means of dissemination. ### (14) the regulation should provide for harmonised transparency requirement applicable to actors providing political advertising and related services (i.e. activities that are normally provided for remuneration); those services consist in particular of the preparation , placement , promotion , publication and dissemination of political advertising. the rules of this regulation that provide for a high level of transparency of political advertising services are based on article 114 of the tfeu. this regulation should also address the use of targeting and amplification techniques in the context of the publication , dissemination or promotion of political advertising that involve the processing of data. the rules of this regulation that address the use of targeting and amplification are based on article 16 of the tfeu. political advertising directed to individuals in a member state should include advertising entirely prepared , placed or published by service providers established outside the union but disseminated to individuals in the union. to determine whether a political advertisement is directed to individuals in a member state , account should be taken of factors linking it to that member state , including language , context , objective of the advertisement and its means of dissemination.


### (15) there is no existing definition of political advertising or political advertisement at union level. a common definition is needed to establish the scope of application of the harmonised transparency obligations and rules on targeting and amplification. this definition should cover the many forms that political advertising can take and any means and mode of publication or dissemination within the union , regardless of whether the source is located within the union or in a third country. ### (15) there is no existing definition of political advertising or political advertisement at union level. a common definition is needed to establish the scope of application of the harmonised transparency obligations and rules on targeting and amplification. this definition should cover the intention to influence , the many forms that political advertising can take and any means and mode of publication or dissemination within the union , regardless of whether the source is located within the union or in a third country.


### (17) the publication or dissemination by other actors of a message that is liable to influence the outcome of an election or referendum , legislative or regulatory process or voting behaviour should also constitute political advertising. in order to determine whether the publication or dissemination of a message is liable to influence the outcome of an election or referendum , a legislative or regulatory process or voting behaviour , account should be taken of all relevant factors such as the content of the message , the language used to convey the message , the context in which the message is conveyed , the objective of the message and the means by which the message is published or disseminated. messages on societal or controversial issues may , as the case may be , be liable to influence the outcome of an election or referendum , a legislative or regulatory process or voting behaviour. ### (17) the publication or dissemination by other actors of a message that is liable and designed to influence the outcome of an election or referendum , legislative or regulatory process or voting behaviour should also constitute political advertising. in order to determine whether the publication or dissemination of a message is liable and designed to influence the outcome of an election or referendum , a legislative or regulatory process or voting behaviour , account should be taken of all relevant factors such as the sponsor of the message , the content of the message , the language used to convey the message , the context in which the message is conveyed , the objective of the message and the means by which the message is published or disseminated. messages on societal or controversial issues may , as the case may be , be liable to influence the outcome of an election or referendum , a legislative or regulatory process or voting behaviour.


### (17) the publication or dissemination by other actors of a message that is liable to influence the outcome of an election or referendum , legislative or regulatory process or voting behaviour should also constitute political advertising. in order to determine whether the publication or dissemination of a message is liable to influence the outcome of an election or referendum , a legislative or regulatory process or voting behaviour , account should be taken of all relevant factors such as the content of the message , the language used to convey the message , the context in which the message is conveyed , the objective of the message and the means by which the message is published or disseminated. messages on societal or controversial issues may , as the case may be , be liable to influence the outcome of an election or referendum , a legislative or regulatory process or voting behaviour. ### (17) the publication or dissemination by other actors of a message that is liable to influence the outcome of an election or referendum , legislative or regulatory process or voting behaviour should also constitute political advertising. in order to determine whether the publication or dissemination of a message is liable to influence the outcome of an election or referendum , a legislative or regulatory process or voting behaviour , account should be taken of all relevant factors such as the intention to influence , the content of the message , the language used to convey the message , the context in which the message is conveyed , the objective of the message and the means by which the message is published or disseminated. messages on societal or controversial issues may , as the case may be , be liable to influence the outcome of an election or referendum , a legislative or regulatory process or voting behaviour.


### (19) political views expressed in the programmes of audiovisual linear broadcasts or published in printed media without direct payment or equivalent remuneration should not be covered by this regulation. ### (19) medias contribute to the well functioning of democratic processes and play an essential role in the freedom of expression and right to information. they provide a space for public debate and contribute to public opinion-forming. this regulation should therefore not affect medias editorial freedom. political views expressed under editorial responsibility or in the programmes of audiovisual linear broadcasts or published in printed media without direct payment or equivalent remuneration should not be covered by this regulation.


### (19) political views expressed in the programmes of audiovisual linear broadcasts or published in printed media without direct payment or equivalent remuneration should not be covered by this regulation. ### (19) the media contribute to the good-functioning of democratic processes and play an essential role in freedom of expression and the right to information , particularly during election periods. they provide a space for public debate and contribute to public opinion-forming. this regulation should therefore not affect the media’s editorial freedom. political views expressed under the editorial responsibility of a service provider in the programmes of audiovisual media including linear and non-linear broadcasts or published in printed media without direct payment or equivalent remuneration should not be covered by this regulation.


### (29) the rules on transparency laid down in this regulation should only apply to political advertising services , i.e. political advertising that is normally provided against remuneration , which may include a benefit in kind. the transparency requirements should not apply to content uploaded by a user of an online intermediary service , such as an online platform , and disseminated by the online intermediary service without consideration for the placement , publication or dissemination for the specific message , unless the user has been remunerated by a third party for the political advertisement. ### (29) the rules on transparency laid down in this regulation should only apply to political advertising services , i.e. political advertising that is normally provided against remuneration , which may include a benefit or expected benefit in kind. the transparency requirements should not apply to content uploaded by a user of an online intermediary service , such as an online platform , and disseminated by the online intermediary service without consideration for the placement , publication or dissemination for the specific message , unless the user has been remunerated or received benefit in kind by a third party for the political advertisement.


### in this regard , political advertising publishers shall use efficient and prominent marking and labelling techniques that allow the political advertisement to be easily identified as such and shall ensure that the marking or labelling remains in place in the event a political advertisement is further disseminated. ### in this regard , digital political advertising publishers shall use efficient and prominent marking and labelling techniques that allow the online political advertisement to be easily identified as such and shall ensure that the marking or labelling remains in place in the event an online political advertisement is further disseminated.


### 2. the transparency notice shall be included in each political advertisement or be easily retrievable from it , and shall include the following information: ### 2. the transparency notice shall be included in each online political advertisement or be easily retrievable from it , and shall include the following information:


### based among others on information received in line with article 6(3) , information on the aggregated amounts spent or other benefits received in part or full exchange for the preparation , placement , promotion , publication and dissemination of the relevant advertisement , and of the political advertising campaign where relevant , and their sources; ### based among others on information received in line with article 6(3) , information on the aggregated amounts spent or other benefits received or expected in part or full exchange for the preparation , placement , promotion , publication and dissemination of the relevant advertisement , and of the political advertising campaign where relevant , and their sources;


### based among others on information received in line with article 6(3) , information on the aggregated amounts spent or other benefits received in part or full exchange for the preparation , placement , promotion , publication and dissemination of the relevant advertisement , and of the political advertising campaign where relevant , and their sources; ### based among others on information received in line with article 6(3) , information on the aggregated amounts spent or other benefits received in part or full exchange for the preparation , placement , promotion , publication and dissemination of the relevant advertisement , and of the online political advertising campaign where relevant , and their sources;


### where applicable , links to online repositories of advertisements; ### links to online repositories and libraries of political advertisements;


### 3. political advertising publishers shall make reasonable efforts to ensure that the information referred to in paragraph 1 and 2 is complete , and where they find this is not the case , they shall not make available the political advertisement. ### 3. political advertising publishers shall ensure that the information referred to in paragraph 1 and 2 is complete updated , and where they find this is not the case , they shall withdraw or not make available the political advertisement.


### 3. political advertising publishers shall make reasonable efforts to ensure that the information referred to in paragraph 1 and 2 is complete , and where they find this is not the case , they shall not make available the political advertisement. ### 3. digital political advertising publishers shall make reasonable efforts to ensure that the information referred to in paragraph 1 and 2 is complete and accurate , and where they find this is not the case , they shall not make available the online political advertisement.


### 4. transparency notices shall be kept up to date and presented in a format which is easily accessible and , where technically possible , machine readable , clearly visible and user friendly , including through the use of plain language. the information shall be published by the political advertising publisher with the political advertisement from its first publication until one year after its last publication. ### 4. transparency notices shall be kept up to date and presented in a format which is easily accessible and , machine readable , clearly visible and user friendly , including through the use of plain language. the information shall be published by the political advertising publisher with the political advertisement from its first publication until two years after its last publication.


### 4. transparency notices shall be kept up to date and presented in a format which is easily accessible and , where technically possible , machine readable , clearly visible and user friendly , including through the use of plain language. the information shall be published by the political advertising publisher with the political advertisement from its first publication until one year after its last publication. ### 4. transparency notices shall be kept up to date and presented in a format which is easily accessible and , where technically possible , machine readable , clearly visible and user friendly , including through the use of plain language. the information shall be published by the political advertising publisher with the political advertisement from its first publication until five years after its last publication.


### 4. transparency notices shall be kept up to date and presented in a format which is easily accessible and , where technically possible , machine readable , clearly visible and user friendly , including through the use of plain language. the information shall be published by the political advertising publisher with the political advertisement from its first publication until one year after its last publication. ### 4. transparency notices shall be kept up to date and presented in a format which is easily accessible and , where technically possible , machine readable , clearly visible and user friendly , including through the use of plain language. the information shall be published by the digital political advertising publisher with the political advertisement from its first publication until one year after its last publication.


### 5. political advertising publishers shall retain their transparency notices together with any modifications for a period of five years after the end of the period referred to in paragraph 4. ### 5. political advertising publishers shall retain their transparency notices together with any modifications for a period of ten years after the end of the period referred to in paragraph 4.


### 5. political advertising publishers shall retain their transparency notices together with any modifications for a period of five years after the end of the period referred to in paragraph 4. ### 5. digital political advertising publishers shall retain their transparency notices together with any modifications for a period of five years after the end of the period referred to in paragraph 4.


### 6. political advertising publishers which are very large online platforms within the meaning of article 25 of regulation (eu) 2021/xxx [the dsa] shall ensure that the repositories that they make available pursuant to article 30 of that regulation [digital services act] make available for each political advertisement in the repository the information referred to in paragraph 2. ### 6. political advertising publishers shall have public repositories of the political advertisements they serviced. those repositories should be available for each political advertisement and include a set of minimum functionalities , as well as a set of minimum search criteria that enables users and researchers to perform customised searches to retrieve real-time data in standard format and allow for easier cross-platform comparison , research and monitoring. those should include: access in real time to the repositories data; be comprehensive with data granularity on each individual advertising; designed and structure following commun standards and thus comparable; easily accessible , online and in machine-readable format; contain all the information requested in article 7 as well as annex i and ii.


### 6. political advertising publishers which are very large online platforms within the meaning of article 25 of regulation (eu) 2021/xxx [the dsa] shall ensure that the repositories that they make available pursuant to article 30 of that regulation [digital services act] make available for each political advertisement in the repository the information referred to in paragraph 2. ### 6. digital political advertising publishers which are very large online platforms within the meaning of article 25 of regulation (eu) 2021/xxx [the dsa] shall ensure that the repositories that they make available pursuant to article 30 of that regulation [digital services act] make available for each political advertisement in the repository the information referred to in paragraph 2.


### 7. member states , including competent authorities , and the commission shall encourage the drawing up of codes of conduct intended to contribute to the proper application of this article , taking into account the specific characteristics of the relevant service providers involved and the specific needs of micro , small and medium-sized enterprises , within the meaning of article 3 of directive 2013/34/eu. ### 7. member states , including competent authorities , and the commission shall encourage the drawing up of codes of conduct intended to contribute to the proper application of this article , taking into account the specific characteristics of the relevant service providers involved.


### 8. the commission is empowered to adopt delegated acts in accordance with article 19 to amend annex i by adding , modifying or removing elements from the list of information to be provided pursuant to paragraph 2 where , in the light of technological developments , such an amendment is necessary for the wider context of the political advertisement and its aims to be understood. ### 8. the commission is empowered to adopt delegated acts in accordance with article 19 to amend annex i by adding , modifying or removing elements from the list of information to be provided pursuant to paragraph 2 where , in the light of technological developments , relevant scientific research , market practices , civil society flagging , developments in supervision by competent authorities and relevant guidance issued by competent bodies; such an amendment is necessary for the wider context of the political advertisement and its aims to be understood.


### 1. where they provide political advertising services , advertising publishers shall include information on the amounts or the value of other benefits received in part or full exchange for those services , including on the use of targeting and amplification techniques , aggregated by campaign , as part of their management report within the meaning of article 19 of directive 2013/34/eu in their annual financial statements. ### 1. where they provide political advertising services , advertising publishers shall include information on the amounts or the value of other benefits received or expected in part or full exchange for those services , including on the use of targeting and amplification techniques , aggregated by campaign , as part of their management report within the meaning of article 19 of directive 2013/34/eu in their annual financial statements.


### 1. where they provide political advertising services , advertising publishers shall include information on the amounts or the value of other benefits received in part or full exchange for those services , including on the use of targeting and amplification techniques , aggregated by campaign , as part of their management report within the meaning of article 19 of directive 2013/34/eu in their annual financial statements. ### 1. where they provide political advertising services , digital advertising publishers shall include information on the amounts or the value of other benefits received in part or full exchange for those services , including on the use of targeting and amplification techniques , aggregated by campaign , as part of their management report within the meaning of article 19 of directive 2013/34/eu in their annual financial statements.


### 2. paragraph 1 shall not apply to undertakings qualifying under article 3(3) of directive 2013/34/eu. ### deleted


### 1. where they provide political advertising services , advertising publishers shall put in place mechanisms to enable individuals to notify them , free of charge , that a particular advertisement which they have published does not comply with this regulation. ### 1. where they provide political advertising services , advertising publishers shall put in place mechanisms to enable individuals or entities to notify them , free of charge , that a particular advertisement which they have published does not comply with this regulation.


### 1. where they provide political advertising services , advertising publishers shall put in place mechanisms to enable individuals to notify them , free of charge , that a particular advertisement which they have published does not comply with this regulation. ### 1. where they provide political advertising services , advertising publishers shall put in place mechanisms to enable individuals to notify them , free of charge and anonymously , that a particular advertisement which they have published does not comply with this regulation.


### 1. where they provide political advertising services , advertising publishers shall put in place mechanisms to enable individuals to notify them , free of charge , that a particular advertisement which they have published does not comply with this regulation. ### 1. where they provide online political advertising services , digital advertising publishers shall put in place mechanisms to enable individuals to notify them , free of charge , that a particular advertisement which they have published does not comply with this regulation.


### 3. political advertising publishers shall allow for the submission of the information referred to in paragraph 1 by electronic means. the political advertising publisher shall inform individuals of the follow up given to the notification as referred to in paragraph 1. ### 3. political advertising publishers shall allow for the submission of the information referred to in paragraph 1 by electronic means. the political advertising publisher shall inform individuals or entities of the follow up given to the notification as referred to in paragraph 1.


### 3. political advertising publishers shall allow for the submission of the information referred to in paragraph 1 by electronic means. the political advertising publisher shall inform individuals of the follow up given to the notification as referred to in paragraph 1. ### 3. digital political advertising publishers shall allow for the submission of the information referred to in paragraph 1 by electronic means. the digital political advertising publisher shall inform individuals of the follow up given to the notification as referred to in paragraph 1.


### 4. repetitive notifications under paragraph 1 regarding the same advertisement or advertising campaign may be responded to collectively , including by reference to an announcement on the website of the political advertising publisher concerned. ### 4. repetitive notifications under paragraph 1 regarding the same advertisement or advertising campaign may be responded to collectively , including by reference to an announcement on the website of the digital political advertising publisher concerned.


### 1. competent national authorities shall have the power to request that a provider of political advertising services transmits the information referred to in articles 6 , 7 and 8. the transmitted information must be complete , accurate and trustworthy , and provided in a clear , coherent , consolidated and intelligible format. where technically possible , the information shall be transmitted in a machine readable format. ### 1. competent national authorities shall have the power to request that a provider of political advertising services transmits the information referred to in articles 6 , 7 and 8. the transmitted information must be complete , accurate and trustworthy , and provided in a clear , coherent , consolidated and intelligible format. the information shall also be transmitted in a machine readable format.


### 2. upon receipt of a request pursuant to paragraph 1 , providers of political advertising services shall , within two working days , acknowledge receipt of that request and inform the authority of the steps taken to comply with it. the relevant service provider shall provide the requested information within ten working days. ### 2. upon receipt of a request pursuant to paragraph 1 , providers of political advertising services shall , within one working days , acknowledge receipt of that request and inform the authority of the steps taken to comply with it. the relevant service provider shall provide the requested information within two working days.


### members of a civil society organisation whose statutory objectives are to protect and promote the public interest , authorised under national or union law; ### members of a civil society organisation whose statutory objectives are to protect and promote the public interest;


### such interested entities shall also include journalists accredited in a member state by national , european or international bodies. ### such interested entities shall also include journalists.


### 3. following a request from an interested entity , the service provider shall make best efforts to provide the requested information or its reasoned response under paragraph 5 , within one month. ### 3. following a request from an interested entity , the service provider shall provide the requested information or its reasoned response under paragraph 5 , within one month.


### 4. when preparing the information to be provided pursuant to paragraph 1 , the service provider may aggregate the relevant amounts or place them in a range , to the extent necessary to protect its commercial legitimate interests. ### deleted


### 5. where requests pursuant to paragraph 1 are manifestly unfounded , unclear or excessive , in particular because of their lack of clarity , the service provider may refuse to respond. in this case , the relevant service provider shall send a reasoned response to the interested entity making the request. ### 5. where requests pursuant to paragraph 1 are manifestly unclear the service provider may refuse to respond. in this case , the relevant service provider shall send a reasoned response to the interested entity making the request.


### 5. where requests pursuant to paragraph 1 are manifestly unfounded , unclear or excessive , in particular because of their lack of clarity , the service provider may refuse to respond. in this case , the relevant service provider shall send a reasoned response to the interested entity making the request. ### 5. where requests pursuant to paragraph 1 are manifestly unclear , in particular because of their lack of clarity , the service provider may refuse to respond. in this case , the relevant service provider shall send a reasoned response to the interested entity making the request.


### 6. where requests under paragraph 1 are repetitive and their processing involves significant costs , the service provider may charge a reasonable and proportionate fee , which in any event shall not exceed the administrative costs of providing the information requested. ### deleted


### 7. service providers shall bear the burden of demonstrating that a request is manifestly unfounded , unclear or excessive , or that requests are repetitive and involve significant costs to process. ### 7. service providers shall bear the burden of demonstrating that a request is manifestly unclear.


### 7. service providers shall bear the burden of demonstrating that a request is manifestly unfounded , unclear or excessive , or that requests are repetitive and involve significant costs to process. ### 7. service providers shall bear the burden of demonstrating that a request is unclear.


### iii targeting and amplification of political advertising ### iii targeting and amplification of online political advertising


### 12 specific requirements related to targeting and amplification ### 12 specific requirements related to the use of personal data for targeting and amplification techniques


### specific requirements related to targeting and amplification ### specific requirements related to the use of personal data for targeting and amplification techniques


### 12 specific requirements related to targeting and amplification ### 12 specific requirements related to targeting and ad delivery


### 3. when using targeting or amplification techniques in the context of political advertising involving the processing of personal data , controllers shall , in addition to the requirements laid down in regulation (eu) 2016/679 and regulation (eu) 2018/1725 , as applicable , comply with the following requirements: ### deleted


### 4. political advertising publishers making use of targeting or amplification techniques shall include in the transparency notice required under article 7 the information specified in paragraph 3(c) and a link to the policy referred to in paragraph 3(a). in case the controller is different from the advertising publisher , the controller shall transmit the internal policy or a reference to it to the political advertising publisher. ### deleted


### 5. political advertising publishers making use of targeting or amplification techniques referred to in paragraph 3 shall include in or together with the advertisement and in the transparency notice required under article 7 a reference to effective means to support individuals exercise their rights under regulation (eu) 2016/679. ### deleted


### 6. information to be provided in accordance with this provision shall be presented in a format which is easily accessible and , where technically feasible , machine readable , clearly visible and user-friendly , including through the use of plain language. ### deleted


### 7. providers of advertising services shall , as necessary , transmit to the controller the information necessary to comply with paragraph 3. ### deleted


### 8. the commission is empowered to adopt delegated acts in accordance with article 19 to amend annex ii by modifying or removing elements of the list of information to be provided pursuant to paragraph 3(c) of this article in light of technological developments in relevant scientific research , and developments in supervision by competent authorities and relevant guidance issued by competent bodies. ### deleted


### article 13 ### deleted


### 3. each member state shall designate one or more competent authorities to be responsible for the application and enforcement of the aspects of this regulation not referred to in paragraphs 1 and 2. each competent authority designated under this paragraph shall structurally enjoy full independence both from the sector and from any external intervention or political pressure. it shall in full independence effectively monitor and take the measures necessary and proportionate to ensure compliance with this regulation. ### 3. each member state shall designate one or more competent authorities to be responsible for the application and enforcement of the aspects of this regulation not referred to in paragraphs 1 , 1a and 2. each competent authority designated under this paragraph shall structurally enjoy full independence both from the sector and from any external intervention or political pressure. it shall in full independence effectively monitor and take the measures necessary and proportionate to ensure compliance with this regulation.


### 6. member states shall ensure cooperation among competent authorities in particular in the framework of national elections networks , to facilitate the swift and secured exchange of information on issues connected to the exercise of their supervisory and enforcements tasks pursuant to this regulation , including by jointly identifying infringements , sharing findings and expertise , and liaising on the application and enforcement of relevant rules. ### 6. member states shall ensure cooperation among competent authorities and supervisory authorities , in particular in the framework of national elections networks and the european regulators group for audiovisual media services , to facilitate the swift and secured exchange of information on issues connected to the exercise of their supervisory and enforcements tasks pursuant to this regulation , including by jointly identifying infringements , sharing findings and expertise , and liaising on the application and enforcement of relevant rules.


### 6. member states shall ensure cooperation among competent authorities in particular in the framework of national elections networks , to facilitate the swift and secured exchange of information on issues connected to the exercise of their supervisory and enforcements tasks pursuant to this regulation , including by jointly identifying infringements , sharing findings and expertise , and liaising on the application and enforcement of relevant rules. ### 6. member states shall ensure cooperation among competent authorities and supervisory authorities in particular in the framework of national elections networks , to facilitate the swift and secured exchange of information on issues connected to the exercise of their supervisory and enforcements tasks pursuant to this regulation , including by jointly identifying infringements , sharing findings and expertise , and liaising on the application and enforcement of relevant rules.


### 7. each member state shall designate one competent authority as a contact point at union level for the purposes of this regulation. ### 7. each member state shall designate one competent authorities as a contact point at union level for the purposes of this regulation.


### 1. in relation to articles 5 to 11 , 13 and 14 member states shall lay down rules on sanctions including administrative fines and financial penalties applicable to providers of political advertising services under their jurisdiction for infringements of the present regulation , which shall in each individual case be effective , proportionate and dissuasive. ### 1. in relation to articles 5 to 11 , 13 and 14 member states shall lay down rules on sanctions including administrative fines and financial penalties applicable cumulatively to providers of political advertising services under their jurisdiction for infringements of the present regulation , which shall in each individual case be effective , proportionate and dissuasive.


### 4. infringements of article 7 shall be considered to be particularly serious where they concern political advertising published or disseminated during an electoral period and directed to citizens in the member state in which the relevant election is being organised. ### 4. infringements of article 7 shall be considered to be particularly serious where they concern political advertising published or disseminated in the run up or during an electoral period and directed to citizens in the member state in which the relevant election is being organised.


### any election with which the advertising is linked , if applicable. ### any election , referendum , or political campaign with which the advertising is linked , if applicable.


### where the publisher is a very large online platform , a link to the advertisement’s location in the publisher’s advertising repository. ### a link to the advertisement’s location in the publisher’s advertising repository.


### information to be provided under article 12(3) ### deleted


### harmonised transparency obligations for providers of political advertising and related services to retain , disclose and publish information connected to the provision of such services; ### harmonised transparency obligations for providers of online political advertising and related services to retain , disclose and publish information connected to the provision of such services;


### harmonised rules on the use of targeting and amplification techniques in the context of the publication , dissemination or promotion of political advertising that involve the use of personal data. ### harmonised rules on the use of targeting and amplification techniques in the context of the publication , dissemination or promotion of online political advertising that involve the use of personal data.


### to contribute to the proper functioning of the internal market for political advertising and related services; ### to contribute to the proper functioning of the internal market for online political advertising and related services;


### 2. ‘political advertising’ means the preparation , placement , promotion , publication or dissemination , by any means , of a message: ### 2. ‘online political advertising’ means the preparation , placement , promotion , publication or dissemination , of a message through digital means:


### which is liable to influence the outcome of an election or referendum , a legislative or regulatory process or voting behaviour. ### which is liable to influence the outcome of an election or referendum , or a legislative or regulatory process.


### 3. ‘political advertisement’ means an instance of political advertising; ### 3. ‘online political advertisement’ means an instance of online political advertising;


### 11. ‘political advertising publisher’ means a natural or legal person that broadcasts , makes available through an interface or otherwise brings to the public domain political advertising through any medium; ### 11. ‘digital political advertising publisher’ means a natural or legal person that disseminates online political advertisements to the public digital sphere.


### 1. in the context of the provision of political advertising services , each political advertisement shall be made available with the following information in a clear , salient and unambiguous way: ### 1. in the context of the provision of online political advertising services , the digital political advertisement publisher shall ensure that political advertisements shall contain the following information in a clear , salient and unambiguous way:


### the identity of the sponsor of the political advertisement and the entity ultimately controlling the sponsor; ### the identity of the political actor , the sponsor of the political advertisement and the entity ultimately controlling the sponsor;


### a transparency notice to enable the wider context of the political advertisement and its aims to be understood , or a clear indication of where it can be easily retrieved. ### a transparency notice to enable the wider context of the political advertisement and its aims to be understood , and a description of the target audience and the factors used to determine the target audience.


### the period during which the political advertisement is intended to be published and disseminated; ### the period during which the online political advertisement is intended to be published and disseminated;