January 14, 2026 — The seventh amendment to the European Directive on Administrative Cooperation, known in administrative shorthand as DAC7, has now produced two complete reporting cycles. The first cycle, covering activity through 2023, was filed with national tax authorities by January 31, 2024. The second cycle, covering 2024, was filed by January 31, 2025. The third cycle, covering 2025 activity, is being prepared as this article is published. The directive's structural impact is now visible. The data sets are populated. The cross-border information exchanges are operating. The audit programmes that the data has enabled are running.

The directive is principally addressed to the digital platform sector. Its scope is broad: rental of immovable property, sale of goods, personal services, and the rental of any mode of transport are all covered when conducted through a platform. The platforms within scope are those that connect sellers with buyers — broadly, the platform business model itself, encompassing accommodation platforms, ride-sharing platforms, marketplace platforms, and gig-economy platforms across an enormous range of activities. The directive requires platform operators to collect identifying information about sellers, verify that information against tax-administration databases where possible, and report annually to the tax authority of one EU Member State, which then automatically exchanges the data with the tax authorities of any other Member State where the seller is resident.

The first reporting cycle exposed implementation challenges that the directive's architects had partially anticipated. The second cycle has been smoother. The audit programmes are now beginning to run. This article describes what DAC7 has actually produced, what the data is being used for, and what implications the regime has for individuals operating across borders through platforms.

The architecture of the directive

DAC7 is the seventh in a sequence of amendments to Directive 2011/16/EU, the foundational European framework for administrative cooperation in the field of taxation. Earlier amendments addressed banking information exchange (DAC2, implementing the Common Reporting Standard within the EU), tax rulings (DAC3), country-by-country reporting (DAC4), beneficial ownership (DAC5), reportable cross-border arrangements (DAC6), and the platform reporting that DAC7 introduced.

The platform reporting requirement applies to platform operators that are tax residents in an EU Member State, that are incorporated in a Member State, that have their place of management in a Member State, that have a permanent establishment in a Member State, or, in the case of foreign platform operators, that facilitate relevant activities for sellers resident in a Member State. The reach is therefore extra-territorial in significant respects: a platform operator established in the United States or Singapore that facilitates accommodation rentals by EU residents is within scope and must register, report, or face penalties.

The reporting obligation requires the operator to collect, for each seller, the following information at minimum: full legal name, primary address, tax identification number issued by the seller's residence jurisdiction, value-added tax identification number where applicable, date of birth for natural persons, business registration number for legal persons, and the existence of any permanent establishment in another Member State. The operator must also report, on a quarterly basis aggregated to the calendar year, the total consideration paid to the seller, the number of relevant transactions, any fees withheld by the platform, and the financial account into which payments were made.

The data is reported by the platform operator to a single competent authority — typically the authority of the Member State in which the operator is registered or has its principal management. The receiving authority then automatically exchanges the data with the tax authorities of every Member State in which any seller in the dataset is resident, by September 30 following the reporting deadline. The architecture is a hub-and-spoke model: each platform reports once, the receiving authority distributes.

The first cycle: data quality and registration

The first DAC7 reporting cycle, covering activity in 2023, produced significant data quality issues that European tax authorities have been working through during 2024 and 2025.

The principal issue was seller identification. Platforms had, in many cases, not previously collected the level of identifying detail that DAC7 requires. A seller who registered for an accommodation platform with an email address and a phone number, who never provided a tax identification number, who used a payment method registered to a different name, was not identifiable for DAC7 purposes without retroactive data collection. Platforms responded with mass data collection campaigns through 2023, frequently requiring sellers to provide tax identification information as a condition of continued participation. The campaigns were generally completed by the time of the first reporting deadline, but the resulting data was incomplete or unverifiable for a non-trivial percentage of sellers.

The second issue was cross-border reach. Platforms operating from outside the EU but facilitating transactions for EU-resident sellers were required to register with one EU Member State as a foreign platform operator. The registration process is technically straightforward but requires the operator to make a series of administrative determinations — selecting a Member State of registration, appointing a tax representative, complying with that State's specific procedures — that took longer than the directive's drafters had anticipated. Several major non-EU platforms registered in 2023 but were not fully operational for DAC7 reporting until late 2024.

The third issue was data verification. The directive requires platforms to verify the seller information they collect against publicly available sources where possible. The verification mechanism varies by Member State and includes, in some Member States, integration with tax identification number databases. The integrations were not fully operational at the start of 2024, with the consequence that the first cycle reported significant volumes of unverified data. The verification mechanisms have been substantially built out through 2024 and 2025, with the second cycle producing materially higher data quality.

The second cycle: data quality and the audit programmes

The second DAC7 reporting cycle, covering 2024 activity, produced data of significantly higher quality. The data quality improvements were the result of platform-side data collection during 2023 and 2024, the build-out of national verification mechanisms, and the natural learning effects of having completed the first cycle.

The audit programmes that the second cycle has enabled are now running. The principal audit themes are as follows.

The first is the cross-check between platform-reported income and seller-declared income. A national tax authority that receives DAC7 data showing a resident seller earned forty thousand euros from accommodation rentals in 2024, against a tax return declaring eight thousand euros from the same activity, has an immediate audit prompt. The cross-check is mechanical, scaling well to the volumes of data DAC7 produces, and is being run routinely by the major Member State authorities.

The second is the identification of undeclared activity altogether. A national authority that receives DAC7 data showing a resident seller earning material income from a platform, against a tax return that declares no income from that source, has an audit prompt of greater urgency. The data has been used to identify casual sellers — individuals who treated platform income as informal supplementary earnings rather than as taxable income — and to require retroactive declaration with associated penalties.

The third is the cross-border identification of dual residents. A seller reported by one Member State authority as a resident, but who shows up in DAC7 data as also active under a second Member State's residency, prompts a review of which jurisdiction has primary taxing rights. The reviews are typically resolved by reference to bilateral tax treaty tie-breakers, but the data has produced reviews that would not have occurred under prior information availability.

The fourth, less developed but visible, is the identification of platform operators who have not registered or who have under-reported. The directive contains penalty provisions for non-registration and for inaccurate reporting. The Member States have begun, in 2025, to use the data sets to identify gaps in platform compliance. The principal targets to date have been smaller platforms that were not operating fully within the framework rather than the major platforms whose compliance is well-established.

The cross-border platform worker

An individual who earns income from platforms while resident in one EU Member State and physically present in another — a category that has grown substantially with the rise of remote work — is materially affected by DAC7.

Pre-DAC7, the platforms that the individual used were not required to report the activity to tax authorities in either jurisdiction. The income was nominally taxable in the country of residence under most regimes, but enforcement depended on self-declaration. Many cross-border platform workers operated in a grey area where their income was visible only to the platform and to themselves.

Post-DAC7, the activity is reported by the platform to the tax authority of the Member State of registration, exchanged automatically to the tax authority of the Member State where the seller is resident, and visible to that authority for tax assessment purposes. The grey area has substantially closed.

The implications extend beyond the EU. Platforms outside the EU that facilitate activity for EU-resident sellers are within scope and must register and report. The reach is therefore extra-territorial: a US-based marketplace platform with significant EU seller activity is reporting that activity to an EU Member State, which then exchanges the data with the seller's residence jurisdiction. The cross-border platform worker who imagined that operating through a non-EU platform would preserve anonymity has been disabused of that notion.

The non-EU dimension

DAC7 is an EU directive but its consequences extend significantly beyond the European Union. Three considerations are worth identifying.

First, the OECD's Model Rules for Reporting by Platform Operators with respect to Sellers in the Sharing and Gig Economy provide a parallel framework that non-EU jurisdictions have begun to adopt. The United Kingdom implemented domestic platform reporting obligations effective January 1, 2024, broadly aligned with DAC7 but with UK-specific implementation. Australia, Canada, and New Zealand have implemented or are implementing parallel regimes. Singapore and Japan have indicated implementation intentions. The platform reporting framework is becoming a global standard, with DAC7 serving as the European implementation of a broader trend rather than as a regional anomaly.

Second, the data exchange provisions of DAC7 do not by their terms extend beyond the EU, but the OECD-aligned regimes adopted elsewhere are designed to be interoperable. The data flows that DAC7 has set up within the EU are being supplemented by parallel flows between EU and non-EU jurisdictions through other instruments, including the Common Reporting Standard and bilateral exchange-of-information agreements. The cumulative effect is that platform activity by an individual resident in one jurisdiction and active on platforms in another is increasingly visible to the residence jurisdiction's tax authority regardless of the EU dimension.

Third, the United Arab Emirates and other Gulf jurisdictions are not parties to DAC7 directly but are increasingly subject to information exchange under broader frameworks. An individual who has relocated to the UAE while continuing to derive platform income, who imagined the UAE's zero personal income tax would isolate that income from European residence-state authorities, must reckon with the residence-state's automatic receipt of platform data. The UAE's role in a defensive tax position is real, but it depends on the individual having genuinely displaced their European residence under the multi-factor tests now applied by every major jurisdiction. DAC7 data is precisely the type of information that residence-state authorities will use to test such claims.

The implications for the platform business model

The platform business model itself has been affected by DAC7 in ways that the directive's drafters anticipated and in ways they did not.

The anticipated effects include increased compliance cost, which has been absorbed by the major platforms but has created friction for smaller operators. The major accommodation, ride-sharing, and marketplace platforms have built dedicated DAC7 compliance teams and integrated reporting infrastructure into their core operational systems. Smaller platforms, particularly those operating in narrower verticals, have faced higher relative compliance costs and have, in some cases, exited EU markets or restructured to reduce DAC7 scope.

The unanticipated effects include the seller-facing implications. Platforms have, in many cases, communicated DAC7 reporting obligations to their sellers as part of registration and ongoing operation. The communications have made platform sellers materially more aware of their tax obligations than they were pre-DAC7. The shift in seller awareness has reduced the volume of casual, undeclared platform activity in some categories, with corresponding effects on platform revenue.

An additional effect has been the increased substitutability between platforms. A seller who is reported by every platform they use cannot escape reporting by switching platforms. The previous incentive to use less well-known platforms in order to reduce visibility has eroded. The major platforms are, paradoxically, advantaged by DAC7 because their compliance infrastructure is mature, their reporting is reliable, and the marginal seller now has less reason to prefer a less compliant alternative.

The next reporting cycle and beyond

The third DAC7 reporting cycle, covering 2025 activity, is being prepared. The data quality is expected to be materially higher than the second cycle, reflecting continued platform-side investment in data collection and verification, and the natural learning effects of an additional year of operation. The audit programmes that the data enables are expected to expand in 2026, with national authorities deploying machine-assisted analytics across the larger DAC7 data sets to identify audit candidates at scale.

Forward-looking, two regulatory developments will further deepen the platform reporting framework. The first is the OECD's continued elaboration of the Crypto-Asset Reporting Framework, which extends platform-style reporting to cryptocurrency exchanges and wallet providers. CARF was endorsed by the G20 in 2023 and is being implemented in EU law through DAC8, with reporting beginning in January 2027. The framework will produce, for crypto-asset transactions, reporting comparable to what DAC7 produces for traditional platform transactions.

The second is the continued expansion of bilateral information exchange. The Common Reporting Standard's coverage continues to grow as additional jurisdictions adhere. The combination of DAC7, CARF, and CRS, supplemented by bilateral exchange agreements, is producing a network of reporting flows that, while individually narrower than the totality of cross-border financial activity, collectively covers an increasing share of the activity that residence-state tax authorities want to monitor.

The end of platform anonymity

The phrase end of platform anonymity overstates the change in some respects and understates it in others. Platform sellers who provide accurate identifying information have always been visible to their platforms; what DAC7 has changed is the platforms' obligation to report that information to tax authorities. The visibility was latent in the platform relationship; it has become operational.

The change is, however, structurally significant. The casual platform seller who treated the activity as informal supplementary income and who relied on the absence of reporting to maintain that informality has had the basis of that informality removed. The cross-border platform worker who relied on jurisdictional opacity to avoid declaration in their residence jurisdiction has lost the opacity. The platform business model that, for a decade and a half, operated in significant part outside the conventional tax reporting framework has been brought within it.

The framework will continue to extend. Each successive reporting cycle will produce more data, of higher quality, with more sophisticated analytical use by national authorities. Each successive amendment to the European framework, and each parallel regime adopted by non-EU jurisdictions, will close additional channels of opacity. The architecture of cross-border platform activity is being rebuilt around the assumption of full reporting. The rebuilding is well underway.