Electronic Signatures in Europe: How eIDAS Has Transformed the Landscape?

Electronic signatures have become a cornerstone of digital transactions across Europe. From opening bank accounts and signing contracts remotely to completing administrative procedures and legal acts, they now make it possible to formalize commitments online with a level of security and legal validity equal to, and sometimes even higher than, traditional paper-based signatures.

This trust, however, did not emerge overnight. It is built on a robust regulatory framework: the eIDAS Regulation, now strengthened by eIDAS 2.0 and its implementing acts. As digital use cases continue to expand and identity fraud becomes increasingly sophisticated, particularly with the rise of deepfakes, the European Union is raising the bar. Electronic signatures are entering a new era, where compliance, identity assurance, and facial biometrics play a central role.

The eIDAS Regulation: A Foundation of Trust for Electronic Signatures

Adopted in 2014, the eIDAS Regulation (electronic IDentification, Authentication and trust Services) fundamentally reshaped the electronic signature landscape in Europe. Its primary goal was to harmonize rules across Member States and establish a common legal framework for digital trust services.

eIDAS defines three levels of electronic signatures:

• Simple electronic signatures, suitable for low-risk, everyday use cases
• Advanced electronic signatures, which strengthen the link between the signer and the signed document
• Qualified electronic signatures, offering the highest level of security and legal value, equivalent to a handwritten signature

This framework enabled electronic signatures to gain legal recognition throughout the European Union, facilitating cross-border transactions and accelerating digital transformation. For Trust Service Providers (TSPs and QTSPs), eIDAS quickly became the reference standard, defining requirements for identification, authentication, traceability, and security.

eIDAS 2.0 and Implementing Acts: What’s Changing for Electronic Signatures

With eIDAS 2.0, the European Union is taking a significant step forward. This evolution goes beyond a simple regulatory update, it reflects new technological and security realities. The implementing acts clarify the concrete technical requirements that market players must meet, particularly when it comes to remote identity verification.

Mandatory Use of Certified Facial Biometric Solutions

One of the most significant changes concerns signer identification. To ensure the integrity of high-assurance electronic signatures, the implementing acts now require the use of certified facial biometric solutions.

The objective is clear: prevent identity theft, presentation attacks (such as photos or videos), and especially injection attacks and deepfakes, which have become extremely difficult to detect without advanced technologies.

These solutions must be evaluated and certified against recognized European and international standards, including:

• ISO/IEC 30107-3 for Presentation Attack Detection (PAD)
• CEN/TS 18099 for Injection Attack Detection (IAD)

Facial biometrics is therefore no longer a “nice-to-have” feature, it has become a regulatory requirement for ensuring the reliability of high-trust electronic signatures.

The Requirement for a “High” Level of Assurance

Another key evolution is the obligation to achieve a High level of assurance for certain use cases, particularly those involving qualified electronic signatures and QTSP services.

This high level of assurance requires:

• Robust and fully secured identity verification processes
• Proven resistance to advanced fraud scenarios
• Independent certification and audits by accredited bodies

In practice, this means that market players can no longer rely on self-declared or non-audited solutions. The technologies used must demonstrate their effectiveness against the most sophisticated fraud techniques, in real-world environments, especially on the web.

For electronic signature providers, these requirements represent both a challenge and an opportunity: a chance to strengthen trust among users, partners, and regulators, while standing out in an increasingly competitive market.

Conclusion :

Since its introduction, eIDAS has profoundly structured the electronic signature market in Europe by establishing a shared framework of trust. With eIDAS 2.0 and its implementing acts, this momentum is accelerating: identity security is now at the heart of electronic signatures.

The obligation to rely on certified facial biometric solutions and to reach a High level of assurance marks a decisive turning point for the industry. Market players must now anticipate these changes, ensure compliance, and adopt technologies capable of meeting tomorrow’s regulatory requirements.

‍