The procedure for granting a qualified status to the provider and service is laid down by related provisions of Regulation (EU) No 910/2014 - where trust service providers, without qualified status, intend to start providing qualified trust services, they shall submit to the Ministry of the Interior a notification of their intention together with a conformity assessment report issued by a conformity assessment body and proof of payment of administrative fee. The Ministry of the Interior shall verify whether the trust service provider and the trust services provided by it comply with the requirements laid down in Regulation (EU) No 910/2014, and in particular, with the requirements for qualified trust service providers and for the qualified trust services they provide. If the Ministry of the Interior concludes that the trust service provider and the trust services provided by it comply with the requirements, the Ministry of the Interior shall grant qualified status to the trust service provider and the trust services it provides. Qualified trust service providers may begin to provide the qualified trust service after the qualified status has been indicated in the trusted lists.

Supervision of qualified trust service providers:

Qualified trust service providers shall be audited at their own expense at least every 24 months by a conformity assessment body. The purpose of the audit shall be to confirm that the qualified trust service providers and the qualified trust services provided by them fulfil the requirements laid down in Regulation (EU) No 910/2014. The qualified trust service providers shall submit the resulting conformity assessment report to the Ministry of the Interior within the period of three working days after receiving it.

The Ministry of the Interior may at any time audit or request a conformity assessment body to perform a conformity assessment of the qualified trust service providers, at the expense of those trust service providers, to confirm that they and the qualified trust services provided by them fulfil the requirements laid down in Regulation (EU) No 910/2014. Where personal data protection rules appear to have been breached, the supervisory body shall inform the data protection authorities of the results of its audits. The Ministry of the Interior shall proceed under Act No. 255/2012 Coll., on inspection (Inspection Code), when carrying out supervision.

Where the Ministry of the Interior requires the qualified trust service provider to remedy any failure to fulfil requirements under Regulation (EU) No 910/2014 and where that provider does not act accordingly, and if applicable within a time limit set by the Ministry of the Interior, the Ministry of the Interior, taking into account, in particular, the extent, duration and consequences of that failure, may withdraw the qualified status of that provider or of the affected service it provides. The Ministry of the Interior shall inform the qualified trust service provider of the withdrawal of its qualified status or of the qualified status of the service concerned.