DAC8: new crypto-asset reporting obligations alongside GIIF reporting

The Ministry of Finance has published draft implementing provisions for DAC8, which define the technical rules for reporting data on crypto-asset users. For the market, this means not only new tax obligations, but also the need to operate under two parallel reporting regimes- towards GIIF and the tax administration.

Draft DAC8 regulation – technical reporting requirements

This is another stage in the implementation of the DAC8 directive, which extends the EU system of automatic exchange of tax information to the crypto-asset market. According to the Ministry of Finance’s announcement, the new regulations are to require reporting crypto-asset service providers to collect and submit to the tax administration data on users’ transactions, including those concerning the acquisition, sale, and exchange of crypto-assets.

DAC8 and GIIF reporting – parallel obligations

From the perspective of entities operating on the crypto market, however, this will not replace the existing obligations, but will constitute an additional reporting regime. Obliged institutions conducting business activities in the field of virtual currencies are already subject to cyclical quarterly reporting to GIIF.

These reports are submitted exclusively through GIIF’s ICT system, signed with a qualified electronic signature, and filed within 18 days from the end of the quarter.

Increase in compliance obligations for VASP/CASP entities

In practice, this means a further increase in compliance burdens on the part of VASP/CASP entities. In addition to AML obligations and ongoing reporting to GIIF, the sector must prepare for the parallel implementation of tax processes related to DAC8, including the proper collection of user and transaction data already at the operational stage.

We have already written about the implementation of DAC8 and the new tax obligations for CASPs on the law firm’s blog in the article “DAC8: new tax obligations for CASPs from 2026 and automatic transaction blocking after 60 days.”

Is your organisation ready for dual reporting (DAC8 and GIIF)?

The new obligations under DAC8 do not replace existing AML requirements, but operate alongside GIIF reporting. This means that additional processes, tools, and procedures for data collection and reporting must be implemented- already at the operational level.

We support crypto-asset market participants in analysing reporting obligations, designing processes, and preparing for DAC8 implementation and compliance with GIIF requirements. Contact us to assess the impact of the new regulations on your business and prepare your organisation for the new reporting obligations.