Opinion No. 1/2017 of the Cooperation Network on the German eID scheme
Having regard to Article 12(5) and (6) of Regulation (EU) 910/2014 ("the eIDAS Regulation").
Having regard to Article 14(i) of Commission Implementing Decision (EU) 2015/296.
Having regard to Article 4 of the Rules of Procedure of the Cooperation Network.
Article 12 of the eIDAS Regulation obliges Member States to cooperate with regard to the interoperability and security of notified electronic identification schemes.
Article 14(i) of Commission Implementing Decision (EU) 2015/296 on cooperation mandates the Cooperation Network to adopt opinions on how an electronic identification scheme to be notified meets the requirements of the eIDAS Regulation.
The Federal Republic of Germany, with a view to notify its electronic identification scheme (German eID based on Extended Access Control, hereinafter referred to as "German eID scheme") in line with Article 7 (g) of the eIDAS Regulation provided the following information to the Member States on 20 February 2017 (hereinafter referred to as: "prenotifications"):
The Cooperation Network agreed on 1 March 2017 to peer review the German eID scheme according to Article 12(6) (c) of the eIDAS Regulation and Chapter III of Commission Implementing Decision (EU) 2015/296.
The Cooperation Network on 3 April 2017 formed a "Peer Review Group" and agreed which topics the peer review process would cover and how it would be organized according to the provisions of Chapter III of Commission Implementing Decision (EU) 2015/296.
The Peer Review Group submitted its report according to Article 11 of Commission Implementing Decision (EU) 2015/296 to the Cooperation Network on 16 June 2017.
The Cooperation Network has examined and discussed the Peer Review Report today.
Based on the examination of the pre-notification documents provided by the Federal Republic of Germany and the findings of the Peer Review Report, the Cooperation Network is of the opinion that the pre-notification documents and additional information provided by the Federal Republic of Germany demonstrate sufficiently how the German eID scheme to be notified meets the requirements of Article 7, Articles 8(1)-(2) for assurance level “high” and 12(1) of the eIDAS Regulation and Commission Implementing Regulation (EU) 2015/1502.
According to Article 4(6) of the Rules of Procedure the Cooperation Network agrees to publish this opinion.
Brussels, 28 June 2017