From the journal

Italy Implements DAC8 Crypto Reporting Under D.Lgs. 194/2025, First Submissions Due 30 June 2027

From 1 January 2026, all crypto-asset service providers reporting to Italian authorities must transmit client identification data, balances, and annual transactions to the Agenzia delle Entrate under Council Directive 2023/2226 (DAC8), transposed into Italian law by Legislative Decree 194/2025. The first reporting cycle covers 2026 transactions, with domestic submissions due 30 June 2027.

2 min read

Council Directive 2023/2226 (DAC8) transposes the OECD's Crypto-Asset Reporting Framework into EU law. It entered force in Italy from 1 January 2026 via Legislative Decree 194/2025. The first reporting cycle covers calendar year 2026 transactions, with submissions due to the Agenzia delle Entrate by 30 June 2027.

DAC8 amends Directive 2011/16/EU on administrative cooperation in taxation. Article 8ad requires Reporting Crypto-Asset Service Providers (RCASPs) to identify reportable users and collect their identification data, balances, and transaction records. Reportable users are EU residents holding accounts or transacting above specified thresholds. Reportable transactions include crypto-to-fiat exchanges, crypto-to-crypto exchanges, and transfers. Legislative Decree 194/2025 sets Italian penalties at EUR 1,500 to EUR 15,000 for reporting or due-diligence failures.

CASPs licensed anywhere in the EU and serving Italian-resident clients must confirm their reporting infrastructure is operational for 2026 transactions. Required data points include customer identification, beneficial ownership for legal entities, transaction categorisation, and annual aggregates. Platforms previously reporting under domestic Italian tax rules must expand data collection to meet DAC8 scope. Italian CASPs that have not yet collected Italian tax identification numbers at client onboarding should address this before year-end 2026.

Italy transposed DAC8 ahead of several other EU member states. Cross-border data exchange between EU tax authorities first occurs by 30 September 2027. CASPs should confirm that existing onboarding templates capture all DAC8 data fields, including address data for clients resident in multiple EU states. ESMA's CASP register will inform the Agenzia delle Entrate matching process once the exchange infrastructure is active.

Licentium advises on crypto-asset tax reporting obligations and maintains a partner network including Italian counsel. Entities assessing DAC8 readiness, reviewing D.Lgs. 194/2025 implementation, or mapping CARF obligations across jurisdictions may contact us. Work we undertake includes RCASP classification analysis, DAC8 due-diligence policy design, Italian tax authority reporting structuring, and cross-border data-exchange preparation.

Source: European Commission, Council Directive 2023/2226 (DAC8) amending Directive 2011/16/EU, taxation-customs.ec.europa.eu, accessed 30 June 2026

Crypto Regulatory

More from the journal

See all
Illia Prokopiev

From Cloud Concentration to AI Dependence: The UK’s Critical Third Parties Regime

The United Kingdom now directly oversees designated technology suppliers whose service failures could threaten financial stability. The question is whether the first cloud designations show a legal expansion toward AI-model providers, and what the present regime requires. This analysis assumes the quoted statement concerns the UK financial-services Critical Third Parties regime and assesses the law through 14 July 2026.

Alberta Regulated iGaming Market Launched on 13 July 2026 with 22 Operators

Alberta's regulated private iGaming market launched on 13 July 2026, making Alberta the second Canadian province to permit private online gambling operators after Ontario. The Alberta Gaming, Liquor and Cannabis Commission serves as market regulator and the Alberta iGaming Corporation oversees commercial operations and operator contracts. Twenty-two operator sites went live on day one, including FanDuel, DraftKings, BetMGM, and BetRivers. Operators must fully launch or exit the Alberta market by 13 October 2026.

European Commission Presents Cybersecurity and AI Action Plan on 7 July 2026

On 7 July 2026, the European Commission presented an Action Plan on Cybersecurity and Artificial Intelligence. The plan directs the Commission and ENISA to evaluate advanced AI models before they reach the EU market, establish a secure testing platform for critical-sector organisations, and launch an EU Grand Challenge on AI-powered cybersecurity solutions. It operates alongside the AI Act, NIS2 Directive, DORA, Cyber Resilience Act, and Cyber Solidarity Act, and introduces no new directly binding obligations.