InfoCert SpA

InfoCert is the largest QTSP in Europe active in more than sixty countries.

Lobbying Activity

Response to Person identification data and electronic attestations of attributes issued to European Digital Identity Wallets

9 Sept 2024

InfoCert SpA, part of the Tinexta Group, is the biggest QTSP in Europe, operating in more than 60 Countries worldwide and aiming at building the European Digital Champion of Trust with solid institutional roots. Our main shareholders are, in fact, the main Italian Chambers of Commerce and we play an institutional role in all the Countries where we operate, supporting the secure digital transformation of the processes both in public and private contexts, and helping Institutions in dealing with the technicalities of trust services, especially when regulating their usage, legal value and evolutions. The Group is today composed by InfoCert SpA and Sixtema SpA in Italy, Camefirma SA in Spain, Certeurope SA in France, Authada Gmbh in Germany and, together with Ascertia Ltd, ICTechLab SA (Tunisia) and the Camerfirma subsidiaries in Colombia and Perù has a vast, multi-national and variegated know-how on Qualified Trust Services, digital identity schemas, Wallet-based Digital Identity and attributes and trust governance frameworks. We are constantly working with the European Commission in supporting the eIDAS revision proposal, as well as with the National Competent Authorities that supervises us in Italy (AgID - Agenzia per lItalia Digitale), Spain (Ministerio de Industria, Comercio y Turismo in Spain), France (ANSSI - Agence Nationale de la sécurité des systèmes dinformation) and Germany (BSI Bundesamt für Sicherheit in der Informationstechnik) and all other stakeholders involved in the legislative and implementation process. As a Group, we are pleased to have the opportunity to provide its input to the drafts Implementing Regulations in relation to Articles 5a (23) and 5c (6) of the regulation (EU) 2024/1183 of the European Parliament and of the Council of 11 April 2024 amending Regulation (EU) No 910/2014 as regards establishing the European Digital Identity Framework. We appreciate the effort being made so far to enhance the regulatory framework and welcome the chance to share our views on these important developments. In attach, you can find our comments and considerations.
Read full response

Response to Trust framework

9 Sept 2024

InfoCert SpA, part of the Tinexta Group, is the biggest QTSP in Europe, operating in more than 60 Countries worldwide and aiming at building the European Digital Champion of Trust with solid institutional roots. Our main shareholders are, in fact, the main Italian Chambers of Commerce and we play an institutional role in all the Countries where we operate, supporting the secure digital transformation of the processes both in public and private contexts, and helping Institutions in dealing with the technicalities of trust services, especially when regulating their usage, legal value and evolutions. The Group is today composed by InfoCert SpA and Sixtema SpA in Italy, Camefirma SA in Spain, Certeurope SA in France, Authada Gmbh in Germany and, together with Ascertia Ltd, ICTechLab SA (Tunisia) and the Camerfirma subsidiaries in Colombia and Perù has a vast, multi-national and variegated know-how on Qualified Trust Services, digital identity schemas, Wallet-based Digital Identity and attributes and trust governance frameworks. We are constantly working with the European Commission in supporting the eIDAS revision proposal, as well as with the National Competent Authorities that supervises us in Italy (AgID - Agenzia per lItalia Digitale), Spain (Ministerio de Industria, Comercio y Turismo in Spain), France (ANSSI - Agence Nationale de la sécurité des systèmes dinformation) and Germany (BSI Bundesamt für Sicherheit in der Informationstechnik) and all other stakeholders involved in the legislative and implementation process. As a Group, we are pleased to have the opportunity to provide its input to the drafts Implementing Regulations in relation to Articles 5a (23) and 5c (6) of the regulation (EU) 2024/1183 of the European Parliament and of the Council of 11 April 2024 amending Regulation (EU) No 910/2014 as regards establishing the European Digital Identity Framework. We appreciate the effort being made so far to enhance the regulatory framework and welcome the chance to share our views on these important developments. In attach you can find our comments and considerations.
Read full response

Response to Protocols and interfaces to be supported by the European Digital Identity Wallets

9 Sept 2024

InfoCert SpA, part of the Tinexta Group, is the biggest QTSP in Europe, operating in more than 60 Countries worldwide and aiming at building the European Digital Champion of Trust with solid institutional roots. Our main shareholders are, in fact, the main Italian Chambers of Commerce and we play an institutional role in all the Countries where we operate, supporting the secure digital transformation of the processes both in public and private contexts, and helping Institutions in dealing with the technicalities of trust services, especially when regulating their usage, legal value and evolutions. The Group is today composed by InfoCert SpA and Sixtema SpA in Italy, Camefirma SA in Spain, Certeurope SA in France, Authada Gmbh in Germany and, together with Ascertia Ltd, ICTechLab SA (Tunisia) and the Camerfirma subsidiaries in Colombia and Perù has a vast, multi-national and variegated know-how on Qualified Trust Services, digital identity schemas, Wallet-based Digital Identity and attributes and trust governance frameworks. We are constantly working with the European Commission in supporting the eIDAS revision proposal, as well as with the National Competent Authorities that supervises us in Italy (AgID - Agenzia per lItalia Digitale), Spain (Ministerio de Industria, Comercio y Turismo in Spain), France (ANSSI - Agence Nationale de la sécurité des systèmes dinformation) and Germany (BSI Bundesamt für Sicherheit in der Informationstechnik) and all other stakeholders involved in the legislative and implementation process. As a Group, we are pleased to have the opportunity to provide its input to the drafts Implementing Regulations in relation to Articles 5a (23) and 5c (6) of the regulation (EU) 2024/1183 of the European Parliament and of the Council of 11 April 2024 amending Regulation (EU) No 910/2014 as regards establishing the European Digital Identity Framework. We appreciate the effort being made so far to enhance the regulatory framework and welcome the chance to share our views on these important developments. In attach you can find our comments and considerations.
Read full response

Response to Functionalities and integrity of European Digital Identity Wallets

9 Sept 2024

InfoCert SpA, part of the Tinexta Group, is the biggest QTSP in Europe, operating in more than 60 Countries worldwide and aiming at building the European Digital Champion of Trust with solid institutional roots. Our main shareholders are, in fact, the main Italian Chambers of Commerce and we play an institutional role in all the Countries where we operate, supporting the secure digital transformation of the processes both in public and private contexts, and helping Institutions in dealing with the technicalities of trust services, especially when regulating their usage, legal value and evolutions. The Group is today composed by InfoCert SpA and Sixtema SpA in Italy, Camefirma SA in Spain, Certeurope SA in France, Authada Gmbh in Germany and, together with Ascertia Ltd, ICTechLab SA (Tunisia) and the Camerfirma subsidiaries in Colombia and Perù has a vast, multi-national and variegated know-how on Qualified Trust Services, digital identity schemas, Wallet-based Digital Identity and attributes and trust governance frameworks. We are constantly working with the European Commission in supporting the eIDAS revision proposal, as well as with the National Competent Authorities that supervises us in Italy (AgID - Agenzia per lItalia Digitale), Spain (Ministerio de Industria, Comercio y Turismo in Spain), France (ANSSI - Agence Nationale de la sécurité des systèmes dinformation) and Germany (BSI Bundesamt für Sicherheit in der Informationstechnik) and all other stakeholders involved in the legislative and implementation process. As a Group, we are pleased to have the opportunity to provide its input to the drafts Implementing Regulations in relation to Articles 5a (23) and 5c (6) of the regulation (EU) 2024/1183 of the European Parliament and of the Council of 11 April 2024 amending Regulation (EU) No 910/2014 as regards establishing the European Digital Identity Framework. We appreciate the effort being made so far to enhance the regulatory framework and welcome the chance to share our views on these important developments. In attach you can find our comments and considerations.
Read full response

Response to Network Code on Cybersecurity

17 Nov 2023

InfoCert welcomes the opportunity to provide our feedback on the proposed delegated regulation. After reviewing the draft regulation, we propose the inclusion of the concept of EIDAS compliant digital trust in certain specific processes, such as: identity verification and authentication, information collection, exchange and secure e-archiving, and supply chain tracking. We believe that a trusted IoT identity platform, that can be based on a PKI infrastructure compliant with the IEC 62351 standard, as well as on the upcoming European Digital Identity Wallet, is the solution to guarantee the authenticity, confidentiality and integrity of data exchanged between actors. We propose to include in the document the use of these technologies as solutions to protect the entire infrastructure and network of devices by issuing certificates with a trusted digital identity that enables secure and qualified communication in the supply chain and electric grid. Digital certificates or verifiable credentials can be issued to software components, legal entities and individuals involved in business processes. These technologies ensure flexibility, interoperability and the creation of common standards, which should be guaranteed by an official European Trusted Entity, such as a QTSP, in order to provide: - Security through easy tracking and monitoring without intermediaries and compatibility with Secure Element; - Privacy with a secure IP, encrypted data flow, data breach prevention and GDPR compliance; - Trusted identity by providing HW and SW component IDs, legal and physical person IDs, controlled enrollment processes, and a framework for assessing roles and responsibilities; - eIDAS-compliant trust processes that ensure legally binding transactions, a Trust Anchor, and controlled enrollment processes. - A certified audit trail. Thank you in advance for taking the time to consider these suggestions. Please feel free to contact us with any questions you may have. Best regards, on behalf of InfoCert S.p.A.
Read full response

Response to Virtual worlds, such as metaverse

3 May 2023

As a Qualified Trust Service Provider, InfoCert firmly believes that actions such as the proposed initiative can positively assist the development of virtual worlds "which respect EU values, way of living and rules, while giving users the freedom to choose how and when to use their digital identity, data and assets". In the attached feedback file InfoCert proposes several focus points for a fruitful development of the topic.
Read full response

Meeting with Alin Mituța (Member of the European Parliament, Shadow rapporteur) and eWitness S.A.

1 Feb 2023 · European Digital Identity Framework (eID)

Response to Cyber Resilience Act

20 Jan 2023

As a Qualified Trust Service Provider, InfoCert firmly believes that actions such as the proposed initiative can positively assist the development on the topic of cyber security on a European level. In the attached feedback file InfoCert proposes several focus points for a fruitful development of the topic.
Read full response

Response to European Digital Identity (EUid)

2 Sept 2021

The attached document reflects the InfoCert Group contribution to the “have your say” consultation on the EC Proposal for a Regulation of the European Parliament and of the Council, amending Regulation (EU) No 910/2014 as regards establishing a framework for a European Digital Identity. InfoCert Group is the largest QTSP in Europe, composed of companies incorporated and supervised under several EU Members States: - InfoCert S.p.A., the leading Italian QTSP, under the vigilance of Agenzia per l’Italia Digitale - AGID, - Camerfirma SA, based in Spain and supervised by the Ministerio de Asuntos Económicos y Transformación Digital, which operate also in Latin America through its subsidiaries Camerfirma Colombia and Camerfirma Perù, - Authada Gmbh, a German company active in the digital identity space, with solutions certified by the Bundesamt für Sicherheit in der Informationstechnik (BSI), - CertEurope SA, a leading French Certification Authority under the vigilance of the Agence nationale de la sécurité des systèmes d’information (ANSSI). We all would like to thank the Commission for the open and collaborative approach that characterized the large debate that precede the Proposal for a review of the eIDAS Regulation, and for the opportunity to continue to express our voice in a formal engagement process. As InfoCert Group, we are strongly committed in putting our vast, multi-national and variegated know-how on Qualified Trust Services, digital identity schemas, self-sovereign identity and trust governance frameworks, available to the to the Commission, the Parliament and all the other stakeholders involved in the legislative and implementation process. The Proposal for the revision of the eIDAS Regulation introduces some important changes that will have a positive impact on users' experience of trust services, and accelerate the take-off of digital identity-related public and private services. Nevertheless, we believe that the framework could even be improved, especially on the following topics: - European Digital Identity Wallet (role of the private sector, liability framework, signature capabilities, security) - Harmonization and interoperability (role of local legislation, unique identifiers and LEI) - QWAC (browser liability and enforcement) - Qualified Attributes (separate legal entity, GDPR prevalence, business models) - Qualified Electronic Archiving (standards, international and European experiences) - Electronic Ledgers (definition, role of the regulation, European experiences) - Cybersecurity (NIS2). We would be happy to provide more information and further elaborate on the topics expressed in our attached contribution, and we remain at your complete disposition. InfoCert Group
Read full response

Response to Europe’s digital decade: 2030 digital targets

9 Mar 2021

Main points expressed in our attached position: - in the next decade, transactions are going to be even more digital than today: digital trust and digital identity will play a crucial role to shape Europe in 2030; - initiatives as EU-ID and Gaia-X are welcomed, but can express their full potential only in synergy with digital trust - Europe has the potential to influence the design of the global international compliance framework for digital technologies, especially AI and IoT, building processes and rules that can enforce the liabilities of the various players, expecially gatekeepers as defined in the Digital Markets package
Read full response

Response to Report on the Application of the eIDAS Regulation

25 Oct 2019

InfoCert Group welcomed the approval of eIDAS Regulation back in 2014, a fundamental milestone in the creation of an interoperable Digital Single Market for trust services. Trust is crucial to build a digital society which is based on the security and protection of both citizens and legal entities; operating in more than 20 Countries across Europe, providing Qualified Trust Services and e-Identity solutions in a variety of vertical markets, InfoCert enjoys a privileged point of view on the strengths and weaknesses of the Regulation as we’ve been able to experience the distinctive implementation approaches adopted by different Member States. In reviewing eIDAS Regulation, we believe that QTSPs should be able to effortlessly dismiss deprecated technologies and, at the same time, have the option to adopt more secure, innovative and technologically advanced solutions for identification, signature devices, signature services and platforms, without having to wait too long for new standards or regulations to become effective. We underline that the creation of a universal, trustworthy and interoperable eIDAS-based Digital Single Market is directly affected by the quality and homogeneity of the approaches of Supervisory Bodies and Conformity Assessment Bodies. In harmonizing the approaches, we need to avoid that bureaucratic and too rigid interpretation prevails, destroying the spaces to do business and opening the market to low-compliant, less-secure, less-trustworthy but, at the same time, highly usable solutions. Please find attached a document containing our Group position.
Read full response