PEC compliance with European standards

| Tax

In 2024, Posta Elettronica Certificata (PEC, Certified Electronic Mail) in Italy will give way to Registered Electronic Mail (REM), the European PEC, to comply with European Regulation 910/2014.

Currently, PEC does not allow for the certification of the identity of the sender and the recipient and does not provide an indisputable guarantee of the integrity and authenticity of a document.

The transition will be free of charge and the mail address will not change. However, it will be necessary to adapt it to the requirements of the qualified certified delivery service defined by the ETSI (European Telecommunications Standards Institute), by carrying out two steps:

  1. the recognition of the PEC holder
  2. the activation of the 2-step verification

Regarding the first point, identity recognition is a necessary transition to ensure the trustworthiness of the sender, natural person or legal representative of a legal entity.

Identity verification can be done through one of the electronic identification tools recognized by the European Commission:

  • SPID digital identity
  • Health Card / National Services Card
  • Digital signature, also remote
  • Electronic Identity Card (CIE 3.0)
  • DVO (De Visu Online) platform with an operator

The second point – two-factor authentication – on the other hand, is necessary to reinforce the security level of the mail account through the double check of access to the service: entry of credentials (PEC address and password) and authentication code.

The code will be sent to a previously verified device and according to the reception way you have chosen:

  • PUSH notification via app on mobile device
  • OTP token via app
  • OTP token via SMS.

After the two-transition verification has been activated, access to the PEC box will then have to be authorized either by confirming the PUSH notification or by entering the OTP (One Time Password).

The implementation phases of the process are still waiting for the implementing regulatory DPCM, but in the meantime, some Posta Elettronica Certificata providers are already starting to enable verification systems.

Among the providers recognized by AgID, for example, Infocert PEC already allows you to upgrade your Legalmail box, identifying the holder in a few simple steps and keeping all the functions of the service intact.

Therefore, we invite you to proceed with the confirmation of identity, using the message located within the mail account by accessing it via the desktop application, in order to adapt the pec to European standards.

DIGITAL SIGNATURE Upgrade

Due to the update of the mandatory minimum security and technological standards provided by Agid, certificates for qualified electronic signature devices with V2 chips issued until December 31st, 2022 will be revoked ex officio on April 17th, 2024. It will then be necessary to apply for a new digital signature medium by that date.

You can check which device will be subject to revocation via the free tool: VERIFICATION PROCEDURE