A separate UK trust-services framework
Following EU exit, the UK retained and amended the eIDAS rules in domestic law. The Electronic Identification and Trust Services for Electronic Transactions Regulations 2016 form part of that framework, and the Information Commissioner’s Office is the UK supervisory body for trust services.
UK and EU frameworks share important concepts, but they are no longer a single supervisory or qualified-status system. A project should identify which jurisdiction governs the provider, service and relying use case.
UK qualified trust services
A provider seeking UK qualified status must be established in the UK and follow the UK-specific conformity-assessment and ICO supervisory process described by the ICO. The UK Trusted List records supervised qualified trust-service providers and their qualified services, including current and historical status.
As in the EU, status attaches to a particular service. A provider’s presence on a list should not be treated as blanket qualified status for every product or service it offers.
Do not assume reciprocal recognition
The ICO states that EU qualified electronic signatures and seals continue to be recognised as qualified in the UK. It also warns that EU Member States do not automatically recognise UK qualified trust services. Cross-border designs therefore need an explicit legal and acceptance analysis rather than an assumption of symmetry.
- Confirm the provider’s establishment and supervisory regime
- Identify the specific service and its list status
- Check the time at which status must be evaluated
- Separate technical validation from legal or contractual acceptance
- Obtain legal advice for material cross-border reliance decisions