Financial sector news

On January 9, 2026, the National Bank of Ukraine updated the Regulations on the NBU BankID System in order to bring it into line with the requirements of the Law of Ukraine “On Electronic Identification and Electronic Trust Services” and Regulation (EU) No. 910/2014 of the European Parliament and of the Council (eIDAS) on electronic identification and trust services for electronic transactions in the EU internal market.

The regulation of elements inherent in electronic identification schemes in the NBU BankID System is aimed at increasing the reliability and security of the system, expanding its scope of application, and creating the preconditions for the further registration of the NBU BankID as an electronic identification scheme with a substantial level of trust.

The updated Regulation, in particular, provides for:

• introduction of the term “electronic identification service of the NBU BankID System” and definition of the procedure for its provision;
  establishing the requirement for the user to have an open account with the subscriber-identifier and to conclude an agreement between them that defines the terms and conditions for the provision of the electronic identification service, as well as information about its cost (if the subscriber-identifier sets a tariff);
  
• expanding the obligations of the subscriber-identifier, in particular regarding the publication of information about the service on the website, the permanent storage of documents and electronic data obtained during user identification and/or verification, as well as the mandatory notification of the user and the National Bank of Ukraine about violations of confidentiality and/or integrity of information that affect the provision of the service;
  
• introduction of cyber and information security requirements for subscriber-identifiers, in particular regarding the implementation of an information security management system in accordance with ISO/IEC 27001:2022, as well as annual penetration testing;
  
• establishing a requirement for the use of dynamic multi-factor authentication by the subscriber-identifier in order to strengthen the protection of users' personal data.

In addition, amendments to the Regulation:

• provide for the possibility of using the NBU BankID System by individual entrepreneurs as users;
  
• regulate the right of public education institutions to use the system on non-commercial terms to perform their functions.
  

The relevant provisions are enshrined in Resolution No. 1 of the Board of the National Bank of Ukraine dated January 8, 2026, “On Amendments to the Regulations on the BankID System of the National Bank of Ukraine,” which comes into force on January 10, 2026.

According to the resolution, subscribers-identifiers are required to bring their activities into compliance with the new requirements of the Regulation by June 30, 2026.