Opinion No. 1/2019 of the Cooperation Network on United Kingdom’s eID Scheme
Having regard to Article 12(5) and (6) of Regulation (EU) 910/2014 ("the eIDAS Regulation").
Having regard to Article 14(i) of Commission Implementing Decision (EU) 2015/296.
Having regard to Article 4 of the Rules of Procedure of the Cooperation Network.
Article 12 of the eIDAS Regulation obliges Member States to cooperate with regard to the interoperability and security of notified electronic identification schemes.
Article 14(i) of Commission Implementing Decision (EU) 2015/296 on cooperation mandates the Cooperation Network to adopt opinions on how an electronic identification scheme to be notified meets the requirements of the eIDAS Regulation.
The United Kingdom, with a view to notify its electronic identification scheme (GOV.UK Verify, hereinafter referred to as the "United Kingdom eID scheme") in line with Article 7 (g) of the eIDAS Regulation provided the following information to the Member States on 26 February 2018 (hereinafter referred to as: "prenotifications"):
- Notification Form
- Supporting Documentation
On 10 October 2018 the Cooperation Network
- agreed to peer review the United Kingdom’s eID scheme according to Article 12(6) (c) of the eIDAS Regulation and Chapter III of Commission Implementing Decision (EU) 2015/296;
- formed a "Peer Review Group" and
- agreed which topics the peer review process would cover and how it would be organized according to the provisions of Chapter III of Commission Implementing Decision (EU) 2015/296.
The scope of the peer review was adjusted from the 7 initially pre-notified IDPs to 5, as requested by the United Kingdom. The Peer Review Group submitted its report according to Article 11 of Commission Implementing Decision (EU) 2015/296 to the Cooperation Network on 24 January 2019.
The Cooperation Network has examined and discussed the Peer Review Report today.
Based on the examination of the pre-notification documents provided by the United Kingdom and the findings of the Peer Review Report, the Cooperation Network is of the opinion that the pre-notification documents and additional information provided by the United Kingdom demonstrate sufficiently how the United Kingdom’s eID scheme to be notified meets the requirements of Article 7, Articles 8(1)-(2) for assurance levels “substantial” and “low” and 12(1) of the eIDAS Regulation and Commission Implementing Regulation (EU) 2015/1502.
According to Article 4(6) of the Rules of Procedure the Cooperation Network agrees to publish this opinion.
Brussels, 30 January 2019