De Facto: 400,000 eID cards could become invalid for e-signatures in Latvia

There is a high likelihood that some ID cards issued in Latvia may effectively become invalid for electronic signing starting in mid-June. This risk could affect 400,000 ID cards. 

The potential issue does not apply to mobile e-signatures activated by the ID cardholder (eParaksts Mobile).

Solutions are only now being sought, even though the problem has been foreseeable since 2024 due to changes in the European regulation.

"We began looking into this issue last year. In fact, from the beginning of the year, we began looking into both this regulation and how to apply it, and, given that there is this report on the implementation of the regulation, we also examined the issues in depth, and then we also began to consult with manufacturers to understand how this might affect us," said Maira Roze, Director of the Citizenship and Migration Affairs Offic (PMLP).

The situation has developed as follows. The ID card blanks supplied to Latvia from 2019 to 2021 contain a microchip for which the manufacturer announced the discontinuation of support in the summer of 2022; the manufacturer has officially stated that it will no longer certify it. In order to maintain their status as qualified signature creation devices (QSCD), they will need to be recertified this June. However, due to the microchip, this will most likely not be possible.

"The problem lies more with the microchip than with the signature certificates themselves or the signature itself. Overall, we currently need to work on several fronts, and we see that work is underway. First, the manufacturers themselves will undergo recertification in their home country, which is France. That is one approach. The second direction involves nationally established regulations that would allow these ID cards to continue being used in the future," explained Kārlis Siliņš, Director of the Commercial Department at the State Agency "Latvian Radio and Television Centre" (LVRTC).

Most of the ID cards for which there are concerns regarding the future certification of the e-signature were issued to Latvian citizens between 2019 and 2022—more than 355,000—as well as to non-citizens—25,760.

According to LVRTC data, approximately 130,000 cardholders actually use the e-signature stored on their cards. The potential issue does not apply to mobile e-signatures activated by the ID cardholder.

"We definitely need to resolve this by June. So, within the current timeframe, we need to find a regulatory framework compliance regulations that align with the current procedures, or a technically modified product that would at least partially allow users to continue using what they are currently accustomed to," noted Siliņš.

ID cards for adult citizens are valid for ten years. Authorities had calculated that the status of the qualified electronic signature creation device required for the delivered cards would remain valid until 2028—that is, ten years from their initial certification—as provided for by the regulations in force at the time.

Now, the blame is being placed on amendments to the European Digital Identity Regulation—since May 2024, certification has been valid for only 5 years. Although e-signatures are used relatively extensively in Latvia and the issued cards have a long validity period, Latvia did not request a transition period or any special conditions for the implementation of the regulation, and will not do so now either.

Recalling ID cards is not an option

A month and a half ago, in early February, the PMLP sought advice from other agencies on how to prepare if the predicted situation were to arise. Revoking and replacing ID cards is not being considered a realistic option. There would be insufficient resources, including the necessary materials. And, without collecting a replacement fee, the PMLP would incur a loss of 11 million euros.

Given the significance of the growing problem and its potential impact across the entire digital environment, the Digital Security Oversight Committee, which operates under the Ministry of Defence, held an emergency meeting last week.

"Both LVRTC, PMLP, and VARAM presented, in their view, the available solution options they plan to implement or initiate to address this problem, which they identified as a potential risk. I may be jumping ahead a bit, but what is important to us, of course, is that from a security oversight perspective, those solutions keep pace with developments on this issue," noted Aivars Puriņš, State Secretary of the Ministry of Defence.

The PMLP has already drafted amendments to ensure that ID cards remain valid as personal identification documents even if the certificates stored on them are not. As for the continued use of e-signature capabilities, the agency hopes to resolve this by legally establishing that these specific cards are valid for signing.

"The amendments to the law stipulate that documents signed in this manner are valid in Latvia and have the same legal force as if we had signed such a document by hand," said PMLP Director Roze. 

LVRTC data on the use of e-signature tools shows in 2025, e-signatures were used a total of 18.3 million times to sign documents (+10% compared to 2024). Of these, 61% were made using "eParaksts mobile," while 39% were made using smart cards.

In Latvia, "eParaksts mobile" is used by 555,000 people, while 1.3 million residents have an ID card with an active e-signature. Last year, 7% of people activated their mobile e-signature using an ID card.

Regardless of how this situation is resolved, authorities are urging residents to secure multiple digital solutions, such as a mobile e-signature or "Smart ID" in addition to their ID card. Their use is not affected by the potential issue.