EU-Endorsed Email Security: The Latest European Mandate for Secure Communication
Europe is in the process of transitioning from La Posta Elettronica Certificata (PEC) to Registered Electronic Mail (REM). This shift marks an important step towards standardizing certified digital services within the European Union (EU).
PEC, a certified delivery service mandated by law in Italy since the mid-2000s, allows for emails with legal value equivalent to registered mail. On the other hand, REM is a Qualified Certified Delivery Electronic Service, compliant with the eIDAS Regulation (EU) No 910/2014, which introduces a framework for Qualified Electronic Delivery Services (QeDS).
The key differences between REM and PEC lie in their levels of trust and security, legal certainty, interoperability, and the use of qualified trust service providers. REM offers stronger guarantees of delivery, identity, integrity, and non-repudiation compared to PEC.
To access REM, a two-factor authentication system will be mandatory, ensuring a higher level of security. To facilitate this transition, the PEC Management System will securely handle connections to the REM mailbox for receiving and sending emails, with no impact on businesses or users.
Italian businesses operating at the European level can benefit from REM by reducing bureaucratic obstacles, simplifying document management, and ensuring compliance with cross-border regulations. REM also provides standardized access and a qualified digital communication tool for public administrations and businesses throughout Europe, facilitating interaction with international entities and partners.
The transition from PEC to REM is ongoing but without a specific deadline publicly stated. The timeline for the mandatory transition from PEC to REM is expected to be between the end of 2025 and the beginning of 2026, subject to the publication of a DPCM.
Intesa offers a PEC Management System to simplify the operations of those who need to manage multiple mailboxes, which will subsequently be adapted to manage REM mailboxes. Adopting a PEC management system can help overcome complications of handling two-factor authentication for direct access to the webmail via the REM Provider's site.
Registered Electronic Mail (REM) offers more secure and reliable communications across the EU, with traceability and certification of sent and received messages. REM can be considered a valid tool throughout the EU, unlike PEC which is currently exclusive to Italy.
As the potential PEC user base expands across the EU, the opportunities for using the electronic legal correspondence channel within businesses will increase, necessitating an organized and traceable management of messages and receipts. The expansion of REM also aims to provide greater interoperability and security, a goal furthered by the ongoing revision of the eIDAS 2.0 regulation.
In summary, while PEC remains widely used in Italy, REM represents an eIDAS-aligned, standardized qualified electronic delivery service that serves a broader European context with increased trust and legal recognition. The transition is ongoing but without a specific deadline publicly stated. For precise legislative and technical timelines, consultation of Italian government or EU Digital Single Market sources is advised.
- The transition from the traditional PEC system to Registered Electronic Mail (REM) in Europe is a significant step towards data-and-cloud-computing-driven standardization of certified digital services within the European Union (EU).
- In the context of Europe's transition from PEC to REM, technology plays a crucial role, particularly in the form of two-factor authentication systems and Qualified Trust Service Providers, aimed at ensuring stronger guarantees of security and legal certainty for businesses and public administrations.
