eIDAS Regulation, Article 5f(3): Acceptance of the European Digital Identity Wallet by Very Large Online Platforms That Require User Authentication
Regulation (EU) No 910/2014, Article 5f(3)
In force since .
An identity reliance rule binding private bodies.
As of .
What it requires
- This duty reaches you if you provide a very large online platform, that is, an online platform the Commission has designated as such under Article 33 of Regulation (EU) 2022/2065, and you require users to authenticate to access your online services (Art. 5f(3)).
- Accept and facilitate the use of European Digital Identity Wallets that are provided in accordance with the Regulation for that user authentication, only upon the voluntary request of the user (Art. 5f(3)).
- Limit the data you request through the wallet to the minimum data necessary for the specific online service for which authentication is requested (Art. 5f(3)).
These lines are LexLint's reading of the law's text, as of .
Who enforces it
Settledness
- As of
- Open questions
- Does a provider of a very large online platform 'require user authentication for access to online services' under Article 5f(3) when it asks a user only for proof of age, without a login to an account?
What it reaches
Applicability criteria
- As of
- Combinator
- All of
- Criteria
- providers of very large online platforms as referred to in Article 33 of Regulation (EU) 2022/2065
- require user authentication for access to online services
What this law does
Article 5f(3) of Regulation (EU) No 910/2014, as inserted by Regulation (EU) 2024/1183, requires providers of very large online platforms that require user authentication for access to online services to also accept and facilitate the use of European Digital Identity Wallets for user authentication. The acceptance is only upon the voluntary request of the user and in respect of the minimum data necessary for the specific online service for which authentication is requested.
Whether a provider is covered turns on its designation as a very large online platform under Article 33 of Regulation (EU) 2022/2065. Pursuant to Article 33(4) of that Regulation the Commission adopts a decision designating the online platform. Article 5a(1) requires each Member State to provide a European Digital Identity Wallet within 24 months of the date of entry into force of the implementing acts referred to in Article 5a(23) and Article 5c(6). Article 16(1) leaves the penalties for infringements of the Regulation to the Member States.
When LexLint raises it
When your app profile says your app operates a social platform.