DAC8: A New Chapter in Tax Transparency
DAC8 (Directive on Administrative Cooperation amendment no. 8) was adopted by the EU in October 2023 and its key provisions entered into force on 1 January 2026. The directive expands automatic exchange of information (AEOI) to include crypto-asset transactions reported by crypto-asset service providers (CASPs), both domestically and cross-border. (taxation-customs.ec.europa.eu)
EU Member States were required to transpose DAC8 into national law by 31 December 2025, with reporting applies from the fiscal year 2026. The first mandatory reports will be exchanged between tax authorities by 30 September 2027. (taxation-customs.ec.europa.eu)
What Entities Must Do: Key Compliance Steps
- Identify obligations: If you’re a CASP (such as exchanges, wallet providers, brokers) and serving EU-resident users, you must collect data on reportable transactions from 1 Jan 2026. Should determine whether you’re obligated domestically or across multiple Member States per activity. (taxation-customs.ec.europa.eu)
- Ensure legal registration: RCASPs (reporting crypto-asset service providers) who aren’t MiCA-authorised must register with a single Member State to coordinate reporting efforts. (taxation-customs.ec.europa.eu)
- Data collection & due diligence: Must collect transaction data including gross proceeds from sales, issuances, redemptions, and transfers of crypto-assets. Also required: user identity verification, residence status, and transaction metadata. Quality and format of data are strictly defined. (taxation-customs.ec.europa.eu)
- Reporting & deadlines: First reports cover the year 2026; must be submitted within 9 months after the end of fiscal year → by 30 September 2027 for most taxpayers. Be ready with systems and processes to meet deadlines. (taxation-customs.ec.europa.eu)
- Coordinate with tax authorities: Data will be exchanged via EU channels to the Member States of residence of non-resident investors. Approval, audit, or review might occur under DAC’s administrative cooperation regime. Stay responsive to tax authority requests. (taxation-customs.ec.europa.eu)
Practical Considerations & Pitfalls
- Cross-border service provision: If providing crypto services or acting as a wallet provider across Member States, be aware that obligation may fall under multiple jurisdictions.
- MiCA vs DAC8 interface: MiCA regulates market conduct, transparency, and services for crypto assets; DAC8 focuses narrowly on tax transparency. Systems will need to comply with both, but certain CASPs may fall differently under each regime.
- Privacy & data protection: Ensure compliance with GDPR and other data protection laws when collecting and transmitting personal information. Misaligned practices may lead to sanctions.
- Preparing for enforcement: Non-compliance may lead to financial penalties or difficulties in verifying tax residence; authorities may perform audits based on exchanged data.
Example Scenario
A crypto-exchange operating online in Estonia but serving users resident in Germany and France:
- Must register as a RCASP in one Member State, collect requisite data on its users in Germany and France, and report those transactions starting with FY 2026.
- Must ensure identity verification procedures meet the requirements; failure to do so may result in data rejection, misreporting or ultimate liability.
Actionable Plan
- Map all products and services to determine which fall under DAC8 definitions (assets, stablecoins, NFTs etc.).
- Audit data collection systems; ensure completeness, accuracy, and residence information.
- Budget and plan for reporting cycles in 2027, including external audits or support.
- Engage legal counsel on national implementation to anticipate country-specific reporting rules beyond EU directive.
- Monitor guidance from the European Commission or Member State tax authorities for implementation clarifications.
Conclusion: DAC8 marks a significant expansion of tax reporting covering crypto. Early preparation is essential: entities should review systems, define responsibilities, and align with both EU-wide and domestic legal rules to meet compliance requirements under tight deadlines.