NEW
Report & API Now Live! Data insights report and open data API endpoints live as of September 23, 2025

EU Digital COVID Certificate Regulation

type
Regulation
Full Name
EU Digital COVID Certificate Regulation (Regulation (EU) 2021/953 of the European Parliament and of the Council of 14 June 2021 (EU Digital COVID Certificate))
Official Name
Regulation (EU) 2021/953 of the European Parliament and of the Council of 14 June 2021 (EU Digital COVID Certificate)

Description

Description
Source

The EU Digital COVID Certificate Regulation established a standardized framework for COVID-19 health credentials across the European Union. This regulation created an interoperable system for verifying vaccination status, test results, and recovery from COVID-19 to facilitate free movement during the pandemic while protecting public health.

Key Aspects:

  1. Objectives and Scope:
  • Create an interoperable certificate system across EU member states
  • Facilitate free movement while maintaining public health measures
  • Ensure non-discrimination and data protection
  • Apply to all EU citizens and legal residents
  1. Core Requirements:

Certificate Types:

  • Vaccination Certificate
  • Test Certificate
  • Recovery Certificate

Technical Requirements:

  • Digital and paper formats
  • Machine-readable barcodes
  • Electronic seals for verification
  • Interoperable across all EU states
  1. Privacy and Security Measures:
  • Implements strict data protection under GDPR
  • Uses a trust framework based on public key infrastructure
  • Requires minimal personal data collection
  • Mandates secure verification systems
  1. Implementation Framework:

Member State Obligations:

  • Issue certificates in standardized format
  • Verify certificates from other member states
  • Protect personal data
  • Ensure free access to testing

Technical Standards:

  • Common data fields
  • Standardized format specifications
  • Verification protocols
  • Security requirements
  1. Key Privacy Protections:

"Personal data shall be processed only for the purpose of accessing and verifying the information included in the certificate to facilitate the exercise of the right of free movement within the Union during the COVID-19 pandemic."

  1. Territorial Scope:
  • All EU Member States
  • European Economic Area
  • Recognized third countries through equivalence decisions
  1. Timeline:
  • Effective: June 15, 2021
  • Application: July 1, 2021
  • Expiration: June 30, 2022 (later extended)

Impact on Digital Identity:

The regulation established important precedents for:

  • Cross-border digital credential verification
  • Privacy-preserving health certificates
  • Interoperable identity standards
  • Public key infrastructure implementation

This framework represents one of the largest-scale implementations of verifiable digital credentials and has influenced global standards for digital health passes and identity systems.

Projects Following this Regulation

If you are featured in the Web of Trust Map and wish to exercise your GDPR rights, including the right to be forgotten, visit the privacy policy page