Initiation of qualified trust services by a qualified trust service provider
The Trust Service Provider (TSP) established in Norway must notify the Norwegian Communications Authority (Nkom) its intention to become qualified.
The TSPs need to apply to a conformity assessment body who will assess their compliance against the requirements for qualified trust service providers and qualified trust services. The conformity assessment body will produce a conformity assessment report, demonstrating how the requirements have been met. The TSPs then submit this report to Nkom for verification. Nkom will analyse the report to ensure all requirements in eIDAS Regulation have been met, and will grant them qualified status if appropriate.
If the TSPs gain qualified status, they will be added to the national trusted list and will be able to use the eIDAS EU trust mark.
To maintain qualified status the TSPs will need to undergo the conformity assessment process every two years, at their own expense.
If the TSPs make significant changes to their qualified trust service, or decide to stop the service, you must notify Nkom.
What is the trusted list?
The trusted list is a published list of all qualified trust service providers and qualified trust services. The Norwegian Communication Authority is the responsible authority to establish maintenance and publish the trusted list of Norway.
What is the EU trust mark and how do a qualified trust service provider use it?
Once added to the trusted list the TSPs are free to use an EU trust mark to demonstrate that they have achieved qualified status. The trust mark is an indicator for users of trust services that they can trust the service to carry out their online transactions in a safe, secure and convenient way. There are certain conditions around use of the trust mark. More information can be found on the EU Commission’s website.
What if the TSP needs to change a qualified trust service?
If the TSPs make changes to their qualified trust service, they should contact Nkom to determine whether their qualified status is still valid and whether or not they should undergo a new conformity assessment.
What happens if a qualified trust service provider stop providing a qualified trust service?
If the TSPs decide to stop providing their qualified trust service, they need to implement their termination plan and notify Nkom. When the TSPs notify Nkom they should explain how they have implemented the termination plan.