S.L. 426.4 Art. 4Submission of a conformity assessment report.

(1) A qualified trust service provider that intends to identify individuals through remote identification procedures in accordance with the provisions of Article 24(1)(d) of the eIDAS Regulation, shall prior to the implementation of such procedures, submit to the Authority a conformity assessment report issued by a conformity assessment body. This report shall consist of a separate report that shall unequivocally confirm or otherwise that the qualified trust service provider concerned and the aforesaid remote identification procedures provide equivalent assurance in terms of reliability to physical presence, and meet the requirements stated in regulations 5 to 14:

Provided that such a report shall in any case be distinct from the conformity assessment report confirming the operations of the qualified trust service provider concerned:

Provided further that the remote identification process shall then be assessed as part of the overall qualified trust service provider operations during the scheduled conformity assessments and at minimum on a bi-yearly basis.

(2) A qualified trust service provider shall not make use of a remote identification procedure unless the Authority first approves in writing the conformity assessment report required in accordance with sub-regulation (1):

Provided that the Authority shall communicate its decision in writing giving its reasons therefor as to whether it approves or not the required conformity assessment report to the qualified trust service provider within three months from the receipt by the Authority of the aforesaid report.