Bull Bitcoin has initiated a legal challenge against the European Union's regulatory changes with the filing of a petition regarding Decree No. 2025-1276. This decree enforces the DAC8 directive, which compels crypto service providers to disclose extensive user information to national tax authorities. Bull Bitcoin’s CEO highlights a concerning transformation of the directive from a compliance measure to an invasion of privacy, dubbing it "Kill Your Customer" as opposed to the traditional "Know Your Customer".
The DAC8 directive, which was adopted on October 17, 2023, requires crypto-asset service providers to gather and report user data such as personal identification, home addresses, and transaction histories. Starting January 1, 2026, these stringent data collection duties will gradually take effect, with the French implementation having been published recently.
Concerns raised by Bull Bitcoin focus on the security risks associated with putting such sensitive information into centralized government databases. Their estimates suggest that the privacy of between 40 and 135 million Europeans could be jeopardized.
What sets Bull Bitcoin apart in this legal confrontation is its regulatory compliance. Having obtained its MiCA license in June 2026, the company operates as a fully compliant Bitcoin-only exchange that maintains a non-custodial model. This means that users maintain control of their private keys, and Bull Bitcoin never directly holds customer funds. This legal action is also noteworthy as it signifies the first resistance against the OECD-aligned Crypto-Asset Reporting Framework that DAC8 mirrors on a European scale.
In summary, Bull Bitcoin's legal move not only challenges a major regulatory shift in EU crypto legislation but also highlights concerns surrounding user security, privacy, and the impact of centralized data handling.