SKN | Bull Bitcoin Challenges France’s DAC8 Crypto Reporting Rules in Court

Key Points:

• Bull Bitcoin has petitioned France’s highest administrative court to annul the decree implementing the European Union’s DAC8 crypto tax reporting rules.
• The exchange argues DAC8 creates a centralized database linking personal identities, home addresses and cryptocurrency transactions, increasing privacy and security risks.
• Bull Bitcoin warns the reporting framework could expose millions of crypto holders to cybercrime and physical attacks if sensitive data is compromised.
• The legal challenge comes as Europe prepares for mandatory DAC8 reporting beginning in 2027 under the EU’s expanded crypto tax transparency framework.

Bull Bitcoin Launches Legal Challenge

Non-custodial Bitcoin exchange Bull Bitcoin has formally challenged France’s implementation of the European Union’s DAC8 crypto reporting rules, filing a petition with the Conseil d’État, the country’s highest administrative court.

The company is seeking to overturn France’s decree implementing the directive, arguing that the legislation creates disproportionate surveillance risks for cryptocurrency users while extending far beyond what is necessary for tax enforcement.

Bull Bitcoin said it initially filed a summary petition in February before submitting a detailed legal brief outlining its constitutional and administrative law arguments.

What DAC8 Requires

The European Union’s Directive on Administrative Cooperation (DAC8), which took effect on Jan. 1, 2026, expands tax reporting obligations to digital assets.

Under the framework, crypto service providers must collect customer identification information and transaction records before automatically reporting the data to national tax authorities. Those authorities will then exchange the information with counterparts across EU member states.

The first reporting cycle will cover transactions conducted during 2026, with submissions due by Sept. 30, 2027.

France adopted the directive through Decree No. 2025-1276, signed in December 2025.

Privacy and Security Concerns

Bull Bitcoin argues the framework creates a centralized repository of highly sensitive financial information by linking users’ legal identities, residential addresses and cryptocurrency transaction histories.

According to the exchange, such databases present attractive targets for cybercriminals, particularly as data breaches continue affecting major financial institutions and digital asset companies.

The company also warned that collecting extensive personal information unrelated to tax liabilities exceeds the directive’s stated objective of improving tax compliance.

Rising Physical Security Risks

The exchange emphasized that crypto investors increasingly face physical threats in addition to cyberattacks.

France has experienced a significant rise in so-called “wrench attacks,” where criminals use intimidation, kidnapping or physical violence to force victims to surrender cryptocurrency holdings or wallet credentials.

Bull Bitcoin argues that maintaining large databases identifying cryptocurrency owners could increase the risks facing individuals if confidential information were ever compromised.

The concerns follow several high-profile customer data breaches across the crypto industry in recent years, reinforcing ongoing debates over balancing regulatory transparency with user privacy.

Global Reporting Standards Expand

The company also signaled that its legal efforts extend beyond DAC8, stating it intends to challenge the broader Crypto-Asset Reporting Framework (CARF), developed by the Organisation for Economic Co-operation and Development (OECD).

CARF aims to establish a global standard for collecting and exchanging cryptocurrency transaction information among participating jurisdictions, expanding international tax transparency beyond the European Union.

Outlook

Bull Bitcoin’s legal challenge highlights the growing tension between regulatory oversight and financial privacy as governments strengthen cryptocurrency reporting requirements worldwide. While policymakers argue that standardized reporting improves tax compliance and reduces illicit activity, industry participants continue to raise concerns about data security, personal privacy and the unintended risks associated with centralized databases containing sensitive information on digital asset holders.