eIDAS 2.0 Regulation
eIDAS 2.0 updates the framework for electronic identification and trust services, introducing the EU Digital Identity Wallet. It enables cross-border digital identity verification and expands recognised trust services.
What does eIDAS 2.0 require and when does it apply?
eIDAS 2.0 applies to Financial Services and Healthcare organisations across all EU member states. The key deadline is 2026 (wallet rollout). Non-compliance carries a maximum penalty of Per member state. Core obligations include accept eu digital identity wallet (very large platforms) and recognise notified eid schemes.
- Accept EU Digital Identity Wallet (very large platforms)
- Recognise notified eID schemes
- Comply with qualified trust service requirements
- Ensure interoperability of digital identity systems
- Implement security certification for trust services
| Deadline | 2026 (wallet rollout) |
| Max fine | Per member state |
| Primary sectors | Financial Services, Healthcare, Public Services |
eIDAS 2.0: Per member state max fine
eIDAS 2.0 applies to Financial Services and Healthcare organisations in all EU member states. Key deadline: 2026 (wallet rollout).
Source: Official Journal of the European Union — eIDAS 2.0 Regulation
2026 (wallet rollout)
Per member state
Financial Services, Healthcare, Public Services
The highest penalty for non-compliance with eIDAS 2.0 in the EU.
EU Official Journal
How do I comply with eIDAS 2.0?
- Accept EU Digital Identity Wallet (very large platforms)
- Recognise notified eID schemes
- Comply with qualified trust service requirements
- Ensure interoperability of digital identity systems
- Implement security certification for trust services
Does eIDAS 2.0 apply to your business?
Find out in 2 minutes with our free regulation checker.
Check now — freeeIDAS 2.0 by Country
Related Regulations
AI Act
The EU AI Act classifies AI systems by risk level and imposes obligations on providers and deployers. High-risk systems face mandatory conformity assessments, documentation, and human oversight requirements.
GDPR
GDPR governs the processing of personal data of EU residents. It requires lawful basis for processing, data subject rights, breach notification, and accountability measures.
NIS2
NIS2 expands cybersecurity obligations to essential and important entities across critical sectors. It mandates risk management, incident reporting, and supply chain security.
Next step — classify
Classify your AI systems
Use the free regulation checker to find out exactly which eIDAS 2.0 obligations apply to your business in 2 minutes.
For informational purposes only. This is not legal advice — consult qualified legal counsel.
Last updated: · Editorial policy