4.7 Compliance with these guidelines where credit and financial institutions use trust services and national identification processes as referred to in Article 13(1) (a) of Directive (EU) 2015/849

Credit and financial institutions may use relevant trust services and electronic identification processes regulated, recognised, approved, or accepted by the relevant national authorities as referred to in Article 13 (1) point (a) of Directive (EU) 2015/849 to comply with these guidelines. When using such solutions, credit and financial institutions should assess in how far the solution complies with the provisions in these guidelines and apply measures necessary to mitigate any relevant risks that arise from the use of these solutions. They should particularly take into account whether the following risks are addressed:

• a) the risks involved in the authentication and set out in their policies and procedures specific mitigation measures, especially with regard to impersonation fraud risks;
• b) the risk that the customer's identity is not the claimed identity;
• c) the risk of lost, stolen, suspended, revoked, or expired identity evidence, including, as appropriate, tools to detect and prevent the use of identity frauds.