Supervisory body

The national authority under eIDAS that supervises trust service providers and grants or withdraws their qualified status.

Under eIDAS, a supervisory body is the authority that each EU member state designates under Article 46b of the Regulation to oversee trust service providers established in its territory - a member state may also designate, by mutual agreement, a body established in another member state. Article 46b replaced the old Article 17 when eIDAS was amended in 2024; there is a separate supervisory regime for wallets in Article 46a. It supervises qualified trust service providers through both ex ante and ex post checks, supervises non-qualified providers only after being alerted to a problem, and decides whether qualified status is granted or withdrawn, for every qualified service type - including the ones eIDAS 2 added, such as electronic attestations of attributes, archiving and ledgers - a decision it bases on the conformity assessment report produced by an accredited conformity assessment body.

In the Netherlands this role sits with the Rijksinspectie Digitale Infrastructuur (RDI), formerly Agentschap Telecom. Besides granting and withdrawing qualified status, it keeps the Dutch entry on the EU Trusted List current and is the authority providers must notify under their incident reporting duties. Every other member state runs its own supervisory body under the same eIDAS rules, so a Dutch QTSP dealing with a foreign counterpart is dealing with a different national authority, not a single EU-wide regulator.