Qualified Electronic Signature: Qualified Electronic Signature (QES)

Highest level of electronic signature under eIDAS with same legal effect as handwritten signature. EUDI Wallets may support QES for legally binding transactions.

The legal status of a Qualified Electronic Signature is unique among electronic signature types. Article 25(2) of the eIDAS regulation establishes that "a qualified electronic signature shall have the equivalent legal effect of a handwritten signature." This is not merely a presumption or a rebuttable claim; it is an absolute legal equivalence recognized across all 27 EU member states.

This means that any document, contract, or legal instrument that requires a handwritten signature under national law can instead be signed with a QES, and the signature carries the same legal weight. No court in any EU member state can reject a QES on the basis that it is electronic rather than handwritten. This cross-border legal recognition is automatic and requires no bilateral agreements between member states.

The practical implications are significant. Today, cross-border transactions often require physical document exchange, notarization, or apostille certification. With QES available through the EUDI Wallet, a citizen in Portugal can sign a contract with a German company with the same legal force as if they had traveled to Germany and signed the document in person with a wet-ink signature.

There are limited exceptions where even QES may not replace a handwritten signature, typically for very specific legal instruments defined in national law (such as wills or certain real estate transactions in some countries). However, these exceptions are narrow and subject to ongoing harmonization efforts across the EU.

The eIDAS regulation defines three levels of electronic signature, each with different legal weight and technical requirements. Understanding these levels is essential for choosing the right signature type for each use case.

Simple Electronic Signature (SES): The broadest and least restrictive category. An SES is defined as "data in electronic form which is attached to or logically associated with other data in electronic form and which is used by the signatory to sign." This includes a typed name at the bottom of an email, a scanned image of a handwritten signature pasted into a document, checking an "I agree" box on a website, or a PIN entry. SES has no specific legal status under eIDAS; it cannot be denied legal effect solely because it is electronic, but it does not automatically prove the signer's identity or the document's integrity.

Advanced Electronic Signature (AES): AES provides stronger guarantees. It must be uniquely linked to the signatory, capable of identifying the signatory, created using data under the signatory's sole control, and linked to the signed data in such a way that any subsequent change is detectable. In practice, this typically involves public-key cryptography where the signer uses a private key to sign and the verifier uses the corresponding public key to verify. AES provides non-repudiation (the signer cannot credibly deny signing) and integrity (any modification after signing is detectable). However, it does not have the automatic legal equivalence to a handwritten signature.

Qualified Electronic Signature (QES): QES is an advanced electronic signature that additionally is created by a Qualified Electronic Signature Creation Device (QSCD), meaning a certified, tamper-resistant device that protects the signing key; and is based on a qualified certificate issued by a Qualified Trust Service Provider (QTSP), meaning a trust service provider that has been audited and is listed on the national trusted list. Only QES carries the automatic legal equivalence to a handwritten signature. In practice, this means only QES can be used for transactions that legally require a handwritten signature.

One of the most transformative provisions of eIDAS 2.0 is the requirement that QES be available to citizens free of charge through the EUDI Wallet. This represents a fundamental shift in the accessibility of legally binding digital signatures.

Current situation: Today, obtaining a QES requires a citizen to find a Qualified Trust Service Provider, undergo identity verification, purchase a qualified certificate (typically EUR 20-200 per year), and use a certified signature creation device (which may be a hardware token or a remote signing service). This cost and complexity has limited QES adoption to businesses and professionals who sign documents frequently. Most EU citizens have never used a QES.

EUDI Wallet approach: The EUDI Wallet already contains the necessary infrastructure for QES. The wallet's Wallet Secure Cryptographic Device (WSCD) serves as the qualified signature creation device. The PID credential establishes the signer's identity at assurance level "high." A Qualified Trust Service Provider can issue a qualified signing certificate that is linked to the PID and stored in the wallet. Once this setup is complete, the citizen can create QES directly from their phone, signing documents with the same legal weight as a handwritten signature.

Free for natural persons: eIDAS 2.0 Article 5a(6) explicitly requires that "the use of the European Digital Identity Wallet for the purpose of generating qualified electronic signatures or qualified electronic seals shall be free of charge for natural persons for non-professional purposes." This means every EU citizen with an EUDI Wallet will have access to free QES, democratizing access to legally binding digital signatures for the first time.

QES cannot exist without Qualified Trust Service Providers (QTSPs). These are the entities that issue the qualified certificates that underpin the legal trust in qualified signatures.

What is a QTSP: A Qualified Trust Service Provider is a trust service provider that has been granted qualified status by the national supervisory body in its member state. To achieve this status, the provider must pass a conformity assessment by an accredited conformity assessment body, demonstrate compliance with the requirements of the eIDAS regulation (including security, availability, and liability provisions), and be listed on the national trusted list published by the member state's supervisory body.

EU Trusted Lists: Each member state maintains a trusted list of all QTSPs within its jurisdiction. These national trusted lists are aggregated into an EU-wide list, allowing any relying party in any member state to verify that a given QTSP is authorized and in good standing. The trusted lists are the root of trust for the entire QES ecosystem.

Role in the EUDI Wallet: In the EUDI Wallet context, QTSPs issue qualified signing certificates that are linked to the citizen's PID credential. The QTSP verifies the citizen's identity (using the PID from the wallet), issues a qualified certificate, and makes it available within the wallet for signing operations. The signing itself happens locally within the wallet's secure hardware, using the private key protected by the WSCD.

Liability framework: QTSPs are subject to strict liability requirements. They are liable for any damage caused by a failure to comply with the eIDAS regulation. They must maintain sufficient financial resources (insurance or guarantee) to cover potential claims. This liability framework gives relying parties confidence that QES can be trusted for high-value transactions.

One of the most powerful aspects of QES is its automatic cross-border recognition across the EU. This is a feature that no other type of electronic signature can claim with the same legal certainty.

Automatic recognition: Article 25(3) of the eIDAS regulation states that "a qualified electronic signature based on a qualified certificate issued in one Member State shall be recognised as a qualified electronic signature in all other Member States." This means a QES created in Romania is automatically valid in Sweden, France, or any other EU country, with no need for additional certification, apostille, or bilateral agreements.

Verification infrastructure: Cross-border QES verification relies on the EU trusted lists. When a relying party receives a document signed with a QES, it can verify the signature by checking the signing certificate against the issuing QTSP, confirming the QTSP's status on the relevant national trusted list, and validating the signature cryptographically. This process is automated and can be completed in milliseconds.

Impact on cross-border transactions: The combination of free QES through the EUDI Wallet and automatic cross-border recognition will enable truly paperless cross-border transactions for the first time. Citizens will be able to sign employment contracts in other EU countries, complete real estate transactions remotely, submit legal filings to courts across the EU, and execute business agreements without physical document exchange, all with the same legal certainty as a handwritten signature.

The availability of free QES through the EUDI Wallet opens up a wide range of practical use cases for citizens and businesses.

Contracts and agreements: Employment contracts, rental agreements, service contracts, insurance policies, and any other legally binding agreement can be signed with QES directly from the wallet. Both parties receive a signed document with the same legal force as a physically signed copy.

Tax filing and government submissions: Citizens can sign tax returns, permit applications, official declarations, and other government submissions with QES. This eliminates the need for physical signatures, postal mail, or in-person visits to government offices. Many member states are expected to require or incentivize QES for tax filings once the EUDI Wallet is available.

Legal documents: Powers of attorney, statutory declarations, corporate resolutions, and court filings can be signed with QES. For legal professionals, this dramatically reduces the time and cost of document execution, particularly in cross-border matters.

Healthcare consent: Informed consent forms for medical procedures, organ donation declarations, and advance healthcare directives can be signed with QES, providing legally binding documentation of the patient's wishes.

Financial transactions: Loan agreements, investment mandates, insurance claims, and other financial documents requiring the highest level of signature assurance can be executed with QES through the wallet, enabling fully digital financial workflows.