Bull Bitcoin has filed a legal challenge with France’s Conseil d’État to annul Decree No. 2025-1276, which transposes the EU DAC8 directive into French law, arguing it creates a massive surveillance grid and poses data security and safety risks for crypto users.

The challenge argues that DAC8 would build a mass database tying legal identities to home addresses and non-tax-relevant transactions, raising safety concerns amid potential data leaks and kidnapping risks.

Bull Bitcoin contends that DAC8 expands data collection and sharing beyond what regulated crypto providers typically face, creating a broad surveillance framework.

The broader context notes upcoming EU moves, under AMLR and other measures, to restrict privacy coins and anonymous accounts, signaling Europe’s push for transparency in digital asset markets.

DAC8 information resources are provided on the official site (dac8.com), with sources like EUR-Lex, OECD, and Legifrance to inform debate across languages.

CARF is the OECD-developed global framework for crypto-asset reporting, intended to collect and exchange information across jurisdictions.

CARF aims to establish a consistent, worldwide standard for sharing crypto transaction data among countries.

Bull Bitcoin indicates it is prepared to escalate the case to the Court of Justice of the European Union and the French Constitutional Council if needed.

The challenge comes amid broader EU crypto regulation, including MiCA implementation and tighter oversight on taxation, AML, and cross-border reporting.

Bull Bitcoin highlights notable data breaches in France and globally to illustrate systemic risks of centralized data collection, citing recent incidents and their costs.

The proposal is framed as a privacy and security risk, describing DAC8 as a honeypot vulnerable to leaks and hacks.

The case could become a major judicial test of DAC8 within the EU, potentially shaping the balance between tax enforcement and privacy protections.