COMMISSION IMPLEMENTING REGULATION (EU) 2024/2902 of 20 November 2024 laying down implementing technical standards for the application of Regulation (EU) 2023/1114 of the European Parliament and of the Council with regard to reporting related to asset-referenced tokens and to e-money tokens denominated in a currency that is not an official currency of a Member State (Text with EEA relevance)

(1)

For the purposes of the reporting referred to in Article 22(1), point (a), of Regulation (EU) 2023/1114, issuers should provide the number of holders with a breakdown by the holders’ location and within that location the number for custodial wallet holders and the number for non-custodial wallet holders or holders of any other types of distributed ledger addresses that are used for settlement purposes and are not controlled by the holder or by a crypto asset service provider. Within those two categories of wallet holders, namely, custodial and non-custodial, issuers should provide, with an additional breakdown, the number of retail holders. All those breakdowns are necessary for the competent authorities, as information on the concentration of holders and on the volumes for the retail holders are relevant for the supervisors to meet the objectives of Regulation (EU) 2023/1114 and ensure the proper functioning of markets in crypto-assets, market integrity and financial stability in the Union, as well as the protection of holders of crypto-assets, in particular retail holders. The information provided with the breakdown by location of the holders should also be used to determine which competent authorities will qualify to be members of a college under Article 119(2), point (l), of Regulation (EU) 2023/1114, following the criteria set out in Commission Delegated Regulation [C(2024)6911] (2).

(2)

For the purposes of the reporting referred to in Article 22(1), point (b), of Regulation (EU) 2023/1114, and to ensure proper supervision of the requirements on reserve of assets under Articles 36 and 38 of that Regulation, Commission Delegated Regulation establishing regulatory technical standards adopted pursuant to Article 36(4) of Regulation (EU) 2023/1114, and Commission Delegated Regulation establishing regulatory technical standards adopted pursuant to Article 38(5) of Regulation (EU) 2023/1114, issuers should provide the size of the reserve of assets in a broken-down manner to reflect the value and the composition of the reserve of assets, including liquidity management measures.

(3)

In accordance with Article 22(1), second subparagraph, of Regulation (EU) 2023/1114, transactions to be reported in accordance with Article 22(1), points (c) and (d), of Regulation (EU) 2023/1114 are only transactions that lead to a change of the natural or legal person entitled to the asset-referenced token and include transactions settled on the distributed ledger (‘on-chain transactions’) and transactions settled outside the distributed ledger (‘off-chain transactions’). Furthermore, the concept of ‘transaction’ referred to in Article 22(1), second subparagraph, of that Regulation is not concerned with the type of wallets used by the originator or by the beneficiary for sending or receiving a transaction. Accordingly, the reporting requirements referred to in Article 22(1), points (c) and (d), of that Regulation should include transactions between custodial wallets and transactions between a custodial wallet, on the one hand, and a non-custodial wallet or other types of distributed ledger addresses that are not controlled by a holder of an asset-referenced token or by a crypto asset service provider, on the other hand. In addition, the reporting requirement referred to in Article 22(1), point (c), of Regulation (EU) 2023/1114 should also cover transactions between non-custodial wallets and between non-custodial wallets and other types of distributed ledger addresses that are not controlled by a holder of an asset-referenced token or by a crypto-asset service provider. Since issuers have limited information on the holders involved in those transactions, in some cases it cannot be determined whether those transactions are transactions to be reported under Article 22(1) of that Regulation. Therefore, to have the most accurate information possible on those transactions, the reporting requirement referred to in Article 22(1), point (c), of that Regulation should also include information on transfers between non-custodial wallets and between non-custodial wallets and other types of distributed ledger addresses that are used for settlement purposes and are not controlled by a holder of an asset referenced token or by a crypto asset service provider. As transactions are a subset of transfers, such additional information on transfers between non-custodial wallets and between non-custodial wallets and other types of distributed ledger addresses that are not controlled by a holder of an asset-referenced token or by a crypto-asset service provider could be used as a proxy and provide useful information on the number and value of the transactions between non-custodial wallets and between non-custodial wallets and other types of distributed ledger addresses that are not controlled by a holder of an asset-referenced token or by a crypto-asset service provider.

(4)

For the purposes of the reporting requirement referred to in Article 22(1), point (c), of Regulation (EU) 2023/1114, issuers should provide the information on the transactions with a breakdown for geographical distribution, meaning the countries of holders involved in the transactions. Such a breakdown would provide useful information on the concentration of transactions for the competent authorities performing their supervisory roles. The information provided with the breakdown by countries of the transactions will be also used to determine which competent authorities will qualify to be members of a college under Article 119 of Regulation (EU) 2023/1114, as provided for in Delegated Regulation [C(2024)6911]. That breakdown is not required for the transactions and transfers between non-custodial wallets or between non-custodial wallets and other types of distributed ledger addresses that are not controlled by a holder of an asset-referenced token or by a crypto asset service provider, due to the limited information issuers have on the holders involved in such transactions and transfers.

(5)

To be effective, the reporting framework should include reporting reference dates and remittance dates ensuring proper and timely sharing of data so that the data relates to the same period and is submitted at the same time for all reporting entities, and to allow the comparability of data across the issuers and competent authorities, while using standardised formats and templates.

(6)

Continuity of reporting should be ensured in cases where temporary changes in the issue value of the tokens would make that value go below the threshold referred to in Article 22(1) of Regulation (EU) 2023/1114. Therefore, it is necessary to require reporting for extra time so as to confirm whether the drop below the threshold is temporary. That would not have an impact on the issuers, as they will already have their reporting systems in place.

(7)

For the purposes of the reporting requirement referred to in Article 22(3) of Regulation 2023/1114, some information which crypto-asset service providers should provide to the issuers could include personal data when it relates to natural persons. That includes full names accompanied by national identification numbers, official tax registration numbers, or passport numbers. The collection of such personal data in that case is necessary in order to achieve the objectives of Regulation (EU) 2023/1114 as, without that information, the issuers could not determine the precise number of holders of an asset-referenced token and they would be double counting holders having multiple accounts with different crypto-asset service providers. Such imprecise data would distort the information reported to the competent authorities about the number of holders of an asset-reference token and would therefore hinder proper supervision by the competent authorities. As a result, there is no other way to accurately reflect the information on the holders of asset-referenced tokens in the reporting and the usual measures for limiting or protecting personal data sharing, such as pseudonymisation, cannot be applied in that case.

(8)

For the purposes of the reporting requirement referred to in Article 22(3) of Regulation 2023/1114, crypto-asset service providers should also provide to the issuer the public distributed ledger addresses they use for making transfers on behalf of their clients. Such information is necessary for issuers to be able to identify which transactions registered on the distributed ledger take place between non-custodial wallets and to report the transactions in scope of the reporting obligations.

(9)

To ensure that the information reported to the competent authority is correct and complete, issuers should have systems and procedures in place that allow the issuer to reconcile the data received from the crypto-asset service providers pursuant to Article 22(3) of Regulation (EU) 2023/1114. Such systems and procedures should also allow the issuer to reconcile the data reported by crypto-asset service providers with the data available to the issuer from other sources, including, where applicable, transactional data available on the distributed ledger.

(10)

Issuers should implement in their internal policies a maximum retention period for the personal data of the individual holders shared by the crypto-asset service providers. Considering the objective of ensuring compliance with the reporting obligations pursuant to Article 22(1) of Regulation (EU) 2023/1114, that maximum retention period should not exceed 5 years from the date of obtaining the personal data.

(11)

This Regulation should also apply mutatis mutandis to e-money tokens denominated in a currency that is not an official currency of a Member State, given that Article 22 of Regulation (EU) 2023/1114 applies to e-money tokens denominated in such a currency.

(12)

The European Data Protection Supervisor was consulted in accordance with Article 42(1) of Regulation (EU) 2018/1725 of the European Parliament and of the Council (3) and delivered an opinion on 16 July 2024.

(13)

To align with the date of application of Regulation (EU) 2023/1114 with respect to crypto-asset service providers, the date of application of this Regulation should be deferred.

(14)

This Regulation is based on the draft implementing technical standards submitted to the Commission by the European Banking Authority.

(15)

The European Banking Authority has conducted open public consultations on the draft implementing technical standards on which this Regulation is based, analysed the potential related costs and benefits and requested the advice of the Banking Stakeholder Group established in accordance with Article 37 of Regulation (EU) No 1093/2010 of the European Parliament and of the Council (4),