Source: OJ L, 2024/2902, 28.11.2024

ITS on non-EU currency reporting

COMMISSION IMPLEMENTING REGULATION (EU) 2024/2902

of 20 November 2024

laying down implementing technical standards for the application of Regulation (EU) 2023/1114 of the European Parliament and of the Council with regard to reporting related to asset-referenced tokens and to e-money tokens denominated in a currency that is not an official currency of a Member State

(Text with EEA relevance)

THE EUROPEAN COMMISSION,

Having regard to the Treaty on the Functioning of the European Union,

Having regard to Regulation (EU) 2023/1114 of the European Parliament and of the Council of 31 May 2023 on markets in crypto-assets, and amending Regulations (EU) No 1093/2010 and (EU) No 1095/2010 and Directives 2013/36/EU and (EU) 2019/1937(¹)OJ L 150, 9.6.2023, p. 40–205, ELI: http://data.europa.eu/eli/reg/2023/1114/oj., and in particular Article 22(7), third subparagraph, thereof,

Whereas:

Open full page

Recital 1Breakdown of token holders by location and wallet type

For the purposes of the reporting referred to in Article 22(1), point (a), of Regulation (EU) 2023/1114, issuers should provide the number of holders with a breakdown by the holders’ location and within that location the number for custodial wallet holders and the number for non-custodial wallet holders or holders of any other types of distributed ledger addresses that are used for settlement purposes and are not controlled by the holder or by a crypto asset service provider. Within those two categories of wallet holders, namely, custodial and non-custodial, issuers should provide, with an additional breakdown, the number of retail holders. All those breakdowns are necessary for the competent authorities, as information on the concentration of holders and on the volumes for the retail holders are relevant for the supervisors to meet the objectives of Regulation (EU) 2023/1114 and ensure the proper functioning of markets in crypto-assets, market integrity and financial stability in the Union, as well as the protection of holders of crypto-assets, in particular retail holders. The information provided with the breakdown by location of the holders should also be used to determine which competent authorities will qualify to be members of a college under Article 119(2), point (l), of Regulation (EU) 2023/1114, following the criteria set out in Commission Delegated Regulation [C(2024)6911](²)Commission Delegated Regulation [C(2024)6911] of 31 October 2024 supplementing Regulation (EU) 2023/1114 of the European Parliament and of the Council with regard to regulatory technical standards specifying the conditions for the establishment and functioning of consultative supervisory colleges (not yet published in the Official Journal)..

Recital 2Detailed reporting of reserve of assets composition

For the purposes of the reporting referred to in Article 22(1), point (b), of Regulation (EU) 2023/1114, and to ensure proper supervision of the requirements on reserve of assets under Articles 36 and 38 of that Regulation, Commission Delegated Regulation establishing regulatory technical standards adopted pursuant to Article 36(4) of Regulation (EU) 2023/1114, and Commission Delegated Regulation establishing regulatory technical standards adopted pursuant to Article 38(5) of Regulation (EU) 2023/1114, issuers should provide the size of the reserve of assets in a broken-down manner to reflect the value and the composition of the reserve of assets, including liquidity management measures.

Recital 3Scope of reportable transactions and transfers

In accordance with Article 22(1), second subparagraph, of Regulation (EU) 2023/1114, transactions to be reported in accordance with Article 22(1), points (c) and (d), of Regulation (EU) 2023/1114 are only transactions that lead to a change of the natural or legal person entitled to the asset-referenced token and include transactions settled on the distributed ledger (‘on-chain transactions’) and transactions settled outside the distributed ledger (‘off-chain transactions’). Furthermore, the concept of ‘transaction’ referred to in Article 22(1), second subparagraph, of that Regulation is not concerned with the type of wallets used by the originator or by the beneficiary for sending or receiving a transaction. Accordingly, the reporting requirements referred to in Article 22(1), points (c) and (d), of that Regulation should include transactions between custodial wallets and transactions between a custodial wallet, on the one hand, and a non-custodial wallet or other types of distributed ledger addresses that are not controlled by a holder of an asset-referenced token or by a crypto asset service provider, on the other hand. In addition, the reporting requirement referred to in Article 22(1), point (c), of Regulation (EU) 2023/1114 should also cover transactions between non-custodial wallets and between non-custodial wallets and other types of distributed ledger addresses that are not controlled by a holder of an asset-referenced token or by a crypto-asset service provider. Since issuers have limited information on the holders involved in those transactions, in some cases it cannot be determined whether those transactions are transactions to be reported under Article 22(1) of that Regulation. Therefore, to have the most accurate information possible on those transactions, the reporting requirement referred to in Article 22(1), point (c), of that Regulation should also include information on transfers between non-custodial wallets and between non-custodial wallets and other types of distributed ledger addresses that are used for settlement purposes and are not controlled by a holder of an asset referenced token or by a crypto asset service provider. As transactions are a subset of transfers, such additional information on transfers between non-custodial wallets and between non-custodial wallets and other types of distributed ledger addresses that are not controlled by a holder of an asset-referenced token or by a crypto-asset service provider could be used as a proxy and provide useful information on the number and value of the transactions between non-custodial wallets and between non-custodial wallets and other types of distributed ledger addresses that are not controlled by a holder of an asset-referenced token or by a crypto-asset service provider.

Recital 4Geographical breakdown of reported transactions

For the purposes of the reporting requirement referred to in Article 22(1), point (c), of Regulation (EU) 2023/1114, issuers should provide the information on the transactions with a breakdown for geographical distribution, meaning the countries of holders involved in the transactions. Such a breakdown would provide useful information on the concentration of transactions for the competent authorities performing their supervisory roles. The information provided with the breakdown by countries of the transactions will be also used to determine which competent authorities will qualify to be members of a college under Article 119 of Regulation (EU) 2023/1114, as provided for in Delegated Regulation [C(2024)6911]. That breakdown is not required for the transactions and transfers between non-custodial wallets or between non-custodial wallets and other types of distributed ledger addresses that are not controlled by a holder of an asset-referenced token or by a crypto asset service provider, due to the limited information issuers have on the holders involved in such transactions and transfers.

Recital 5Harmonised reporting reference dates and formats

To be effective, the reporting framework should include reporting reference dates and remittance dates ensuring proper and timely sharing of data so that the data relates to the same period and is submitted at the same time for all reporting entities, and to allow the comparability of data across the issuers and competent authorities, while using standardised formats and templates.

Recital 6Continued reporting after temporary threshold drop

Continuity of reporting should be ensured in cases where temporary changes in the issue value of the tokens would make that value go below the threshold referred to in Article 22(1) of Regulation (EU) 2023/1114. Therefore, it is necessary to require reporting for extra time so as to confirm whether the drop below the threshold is temporary. That would not have an impact on the issuers, as they will already have their reporting systems in place.

Recital 7Use of personal data to identify unique holders

For the purposes of the reporting requirement referred to in Article 22(3) of Regulation 2023/1114, some information which crypto-asset service providers should provide to the issuers could include personal data when it relates to natural persons. That includes full names accompanied by national identification numbers, official tax registration numbers, or passport numbers. The collection of such personal data in that case is necessary in order to achieve the objectives of Regulation (EU) 2023/1114 as, without that information, the issuers could not determine the precise number of holders of an asset-referenced token and they would be double counting holders having multiple accounts with different crypto-asset service providers. Such imprecise data would distort the information reported to the competent authorities about the number of holders of an asset-reference token and would therefore hinder proper supervision by the competent authorities. As a result, there is no other way to accurately reflect the information on the holders of asset-referenced tokens in the reporting and the usual measures for limiting or protecting personal data sharing, such as pseudonymisation, cannot be applied in that case.

Recital 8CASP disclosure of public distributed ledger addresses

For the purposes of the reporting requirement referred to in Article 22(3) of Regulation 2023/1114, crypto-asset service providers should also provide to the issuer the public distributed ledger addresses they use for making transfers on behalf of their clients. Such information is necessary for issuers to be able to identify which transactions registered on the distributed ledger take place between non-custodial wallets and to report the transactions in scope of the reporting obligations.

Recital 9Issuer procedures for reconciling reported data

To ensure that the information reported to the competent authority is correct and complete, issuers should have systems and procedures in place that allow the issuer to reconcile the data received from the crypto-asset service providers pursuant to Article 22(3) of Regulation (EU) 2023/1114. Such systems and procedures should also allow the issuer to reconcile the data reported by crypto-asset service providers with the data available to the issuer from other sources, including, where applicable, transactional data available on the distributed ledger.

Recital 10Maximum five-year retention of holders’ personal data

Issuers should implement in their internal policies a maximum retention period for the personal data of the individual holders shared by the crypto-asset service providers. Considering the objective of ensuring compliance with the reporting obligations pursuant to Article 22(1) of Regulation (EU) 2023/1114, that maximum retention period should not exceed 5 years from the date of obtaining the personal data.

Recital 11Application to certain e-money tokens

This Regulation should also apply mutatis mutandis to e-money tokens denominated in a currency that is not an official currency of a Member State, given that Article 22 of Regulation (EU) 2023/1114 applies to e-money tokens denominated in such a currency.

Recital 12Consultation of the European Data Protection Supervisor

The European Data Protection Supervisor was consulted in accordance with Article 42(1) of Regulation (EU) 2018/1725 of the European Parliament and of the Council(³)Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC (OJ L 295, 21.11.2018, p. 39, ELI: http://data.europa.eu/eli/reg/2018/1725/oj). and delivered an opinion on 16 July 2024.

Recital 13Deferred application to align with MiCA timeline

To align with the date of application of Regulation (EU) 2023/1114 with respect to crypto-asset service providers, the date of application of this Regulation should be deferred.

Recital 14Regulation based on EBA draft technical standards

This Regulation is based on the draft implementing technical standards submitted to the Commission by the European Banking Authority.

Recital 15EBA consultation and stakeholder group involvement

The European Banking Authority has conducted open public consultations on the draft implementing technical standards on which this Regulation is based, analysed the potential related costs and benefits and requested the advice of the Banking Stakeholder Group established in accordance with Article 37 of Regulation (EU) No 1093/2010 of the European Parliament and of the Council(⁴)Regulation (EU) No 1093/2010 of the European Parliament and of the Council of 24 November 2010 establishing a European Supervisory Authority (European Banking Authority), amending Decision No 716/2009/EC and repealing Commission Decision 2009/78/EC (OJ L 331 15.12.2010, p. 12, ELI: http://data.europa.eu/eli/reg/2010/1093/oj).,

HAS ADOPTED THIS REGULATION:

Annexes(1 – 5)

This Regulation shall be binding in its entirety and directly applicable in all Member States.

Done at Brussels, 20 November 2024.

For the Commission

The President

Ursula VON DER LEYEN