EU Member States Trusted Lists Scheme Type Community Rules: specific statement for Bulgaria

Supervision system related to TSPs in the Republic Bulgaria

Supervision system legal framework:

Regulation (EU) No 910/2014 of the European Parliament and of the Council of 23 July 2014 on electronic identification and trust services for electronic transactions in the internal market and repealing Directive 1999/93/EC;

Electronic document and electronic trust services act (promulgated State Gazette (SG), issue 34 of 6.04.2001, last amended and supplemented SG. 85/24 Oct 2017, amend. SG. 97/5 Dec 2017, amend. SG. 14/13 Feb 2018).

The Communications Regulation Commission (CRC) is the national supervision body, implementing the provisions of Regulation (EU) N 910/2014 and Electronic document and electronic trust services act.

The Communication Regulation Commission provides or withdraws qualified status of the trust service providers and the trust services provided by it under the conditions of Art. 20 and 21 of Regulation (EU) N 910/2014.

CRC is also the body responsible for establishing, maintaining and publishing the national Trusted Lists pursuant to article 22(3) of Regulation (EU) 910/2014.

Conditions for granting qualified status to the trust service provider and service:

The procedure for granting a qualified status to the trust service provider and service is in accordance with Art. 21 of Regulation (EU) No 910/2014 – A trust service provider without qualified status, who intends to start providing qualified trust services, shall submit to the Communication Regulation Commission a notification of its intention together with a conformity assessment report issued by a conformity assessment body and a termination plan in cases where the qualified trust service provider ceases its activities. The supervisory body CRC analyses the conformity assessment report and verify whether the trust service provider and its trust services comply with the requirements laid down in Regulation (EU) No 910/2014. If CRC concludes that the trust service provider and the trust services provided by it comply with the requirements, CRC shall grant qualified status to them and CRC enters them on the national Trusted list.

Supervision of qualified trust service providers:

Qualified trust service providers shall be audited at their own expense at least every 24 months by a conformity assessment body. They shall submit the resulting conformity assessment report to the Communication Regulation Commission within the period of three working days after receiving it. CRC may at any time audit or request a conformity assessment body to perform a conformity assessment of the qualified trust service providers, at the expense of those trust service providers, to confirm that they and the qualified trust services provided by them fulfil the requirements laid down in Regulation (EU) No 910/2014.