ZEIDES 2026 conference presentations

The 10th anniversary edition of the ZEIDES Conference will open with welcome addresses by representatives of key institutions and organisations in the fields of digitalisation, information technology and personal data protection.

At the start of the conference, participants will be welcomed by Marjan Antončič, President of the Association for Electronic Identification and Electronic Trust Services and organiser of the ZEIDES Conference; Kristina Valenčič, Acting Director-General of the Directorate for Informatics at the Ministry of the Interior and Public Administration; Dr Jelena Virant Burnik, Information Commissioner of the Republic of Slovenia; and Igor Zorko, President of the Association for Informatics and Telecommunications (ZIT) at the Chamber of Commerce and Industry of Slovenia. Their welcome addresses will set the stage for a day dedicated to current challenges in electronic identification, trust services, digital identity, and secure and trusted digital business.

On the occasion of the 10th anniversary of the ZEIDES Conference, we will pay special tribute to the companies that have played an important role in its story over the years and have contributed to shaping the conference and its development through their cooperation, professional expertise and support.

Recognition will be presented to Genis, Halcom, Netis, Mikrografija, Mikrocop, ELES, Bureau Veritas, SIQ, OSI/Rekono, Setcce, Bankart, Pošta Slovenije and EIUS.

Through these anniversary acknowledgements, we wish to express our appreciation for their long-standing cooperation and contribution to connecting the professional community in the fields of electronic identification, trust services and secure digital business.

The presentation will focus on current developments in electronic identification and trust services, as well as preparations for the introduction of the European Digital Identity Wallet (EUDIW). It will provide an overview of the current European regulatory and technical framework, including eIDAS implementing acts and relevant standards and specifications, together with activities related to the deployment and launch of EUDIW in Slovenia and other countries. 
Practical experience gained through the large-scale pilot project WeBuild will also be presented. Within this project, Slovenia is working together with other European countries and partners on the development and testing of use cases for the EUDIW.
The presentation will also address the necessary adaptations of national legislation, infrastructure, and processes in the areas of electronic identification and trust services. In addition, it will cover the European Business Wallet (EBW), the current status of the legislative process, and the expected further developments in this field.
Another topic will be the forthcoming introduction of mandatory electronic service of documents by public institutions under the Slovenian Administrative Operations Act, which is expected to apply to businesses from next year.

Trust services are a fundamental infrastructure of the digital economy, yet in Slovenia they are still being developed within separate systems, using different technical solutions, procedures and funding models. In some areas, the state simultaneously sets the rules, manages the infrastructure and provides services that are also offered by market providers, while questions of interoperability, funding and competitive neutrality remain unresolved.
Electronic delivery, electronic identification and cloud-based signing all point to the need to move from closed solutions towards common rules, standardised interfaces and an interoperable ecosystem. The development of the EUDI Wallet further reinforces this direction. The goal is a market of interconnected providers where users are free to choose their preferred service, while the state sets the rules, ensures interoperability and oversight, and supports the effective functioning of the market.

Regulatory compliance is now a prerequisite for digital business, while user trust is what ultimately determines its success. In this presentation, we will show how the Rekono ecosystem brings the two together by combining reliable electronic identification, trust services, and a user-friendly experience into a comprehensive solution for secure, compliant, and seamless digital business.
We will also explore how the ecosystem is expanding with new services and evolving in step with the European digital identity framework, as well as what these developments mean for businesses, the public sector, and users in the future of digital business.

AI agents are already entering into transactions, submitting applications and making payments on behalf of citizens and businesses. European rules on digital identity and trust services recognise only two types of actors: natural persons and legal persons.

This raises a number of questions, such as: Are existing building blocks, including electronic attestations of attributes, electronic seals, electronic time stamps and the European Digital Identity Wallet, sufficient to enable the secure delegation of tasks to autonomous agents?

Slovenia has all the key building blocks in place – secure electronic mailboxes, qualified trust services and digital infrastructure – but they still need to be connected into a technically and regulatory harmonised, trusted ecosystem.
The presentation will provide an overview of the current state of electronic delivery and electronic exchange in Slovenia, the impact of the ZUP-I amendment, and the question of whether the market is ready for qualified electronic registered delivery services (QERDS). The second part will present concrete solutions developed by Pošta Slovenije, ranging from the MojaPošta platform in the context of trust services and a hybrid delivery model to supporting services for the digitalisation of business processes – outlining the path from a fragmented system towards an integrated digital trust platform.

In a world where digital services are becoming the foundation of everyday business, trust, security and interoperability are essential to their success. Payment infrastructure, digital identity, trust services and information security are increasingly converging into a single digital ecosystem that enables secure, reliable and user-friendly processes.
As a provider of critical payment infrastructure and digital services, Bankart brings these building blocks together in solutions that enable banks, businesses and users to operate securely and efficiently in the digital environment. The development of these ecosystems will significantly shape how we make payments, verify identities, conduct digital transactions and build trust in the digital society of the future.

Matjaž Mravljak will discuss risk management across the entire supply chain, as set out in Article 22 of the Information Security Act (ZInfV-1). December 19, 2026, marks the end of the twenty-month transition period during which essential and important entities (EE and IE) must comply with the requirements of ZInfV-1. One of the key challenges in implementing ZInfV-1 is supply chain risk management. EE and IE, which also include trust service providers, must assess the risks that external suppliers pose to their operations, determine appropriate measures to manage these risks, and incorporate these measures into contracts with suppliers. This area of ZInfV-1 implementation will receive special attention during inspections following the end of the transition period.

Among the risk management measures required by ZInfV-1, particular emphasis is placed on the use of multi-factor authentication or continuous authentication solutions, as well as qualified trust services, which, as of December 19, 2026, will become mandatory security measures for EE and IE and their suppliers.

In addition to reviewing the requirements and best practices in supply chain risk management, a practical example of conducting a supplier risk assessment will be presented, providing participants with useful guidance for effectively managing risks and strengthening organizational resilience.

In recent years, the European Commission has stepped up its efforts to protect children in the digital environment, with Member States following suit. One of the protective mechanisms is an age verification application, while service providers are also introducing their own age verification methods, which may offer a lower level of privacy protection.
The presentation examines current solutions for effective age verification in the digital environment and assesses them from the perspective of privacy and personal data protection. Particular attention is given to the European approach to protecting children in the digital environment. It also analyses the challenges involved in the practical implementation of age verification solutions and possible directions for the further development of the regulatory and technological framework.

At the closing round table, representatives of the Ministry of the Interior and Public Administration (MNZJU), the Information Security Administration of the Republic of Slovenia (URSIV), Slovenian Accreditation, and other key stakeholders will discuss some of the challenges related to e-identification and authentication of individuals, as well as the use of trust services in remote electronic business. The discussion will focus on questions such as:

• Is it realistic to expect users to start using the EUDI Wallet in the initial phase if service providers do not require it, while providers themselves are reluctant to integrate it until a sufficient number of users are already using it? How can this vicious circle be broken?

• The implementing acts adopted under the eIDAS Regulation (CIR 2015/1502, CIR 2025/1566) and the ETSI TS 119 461 standard set requirements for remote identity proofing that are linked to prior conformity assessment. Are providers ready to meet these requirements, and where are the biggest gaps between current practices and the new requirements?

• The eIDAS Regulation requires Member States to enable natural persons to use the wallet for qualified electronic signatures free of charge for non-professional purposes. How can this obligation be implemented without crowding out private providers of qualified trust services, while maintaining a clear distinction between professional and non-professional use?

• How can we ensure that the introduction of the wallet does not exclude people who do not have a smartphone, do not know how to use one, or do not wish to use one? What alternative channels will be available?

• Do Slovenia and the EU have enough accredited conformity assessment bodies to handle everything that will need to be certified within a short period of time: wallets, electronic identification means, qualified trust service providers, new types of qualified trust services, and remote identification procedures?

• Can we be satisfied with the current state of identification of non-qualified trust service providers as important entities under ZInfV-1, as well as with the contractual arrangements governing their relationships as suppliers to essential and important entities?