DAC7 reporting in Luxembourg: who files, when and what

What is DAC7 reporting in Luxembourg and who has to file it?

DAC7 reporting in Luxembourg is the annual duty, for a digital platform operator with a Luxembourg nexus, to report to the Administration des contributions directes the identity of its sellers and the consideration they received; it follows from the law of 16 May 2023, which transposes Directive (EU) 2021/514, and it creates no new tax.

The scope covers platform operators with a Luxembourg tax residence or another Luxembourg nexus retained by the law and, alongside them, certain third-country operators that choose Luxembourg as their single Member State of registration. The Administration des contributions directes insists on one point in its newsletter of 16 September 2024: the regime creates neither a new tax nor a new taxing rule, only registration, notification and reporting duties.

Two statuses coexist, and that is the first source of error. A reporting platform operator files an annual return. An excluded platform operator files none, but must demonstrate to the administration each year, before the reporting deadline expires, that the platform's entire business model is such that it has no reportable sellers. Both must register: having no reportable seller does not remove an annual step, it changes its object.

We regularly see the same confusion on assignments. The director of a Luxembourg company running a matching website concludes that it is not a platform within the regime because it does not collect payment on behalf of its sellers. The test is not collection, it is the facilitation of the relevant activity. Before concluding that no duty arises, it is worth having the model characterised, which our compliance services take on.

Which activities and which sellers fall within the DAC7 scope?

Four relevant activities trigger DAC7 in Luxembourg: the rental of immovable property, personal services, the sale of tangible goods and the rental of any means of transport; a seller carrying on one of them is reportable, unless it falls into a category of excluded seller.

Immovable property rental is the broadest category, and the administration's frequently asked questions say so without ambiguity: the property may be residential or commercial, built or unbuilt, parking spaces are covered, sub-letting too, and the duration is irrelevant, short or long. An ancillary space let on its own, such as a garden shed, falls within the scope. The private or commercial character of the letting does not take it out.

Excluded sellers form four categories. The first three are statuses: a governmental entity, an entity whose shares are regularly traded on a regulated securities market or an entity related to it, and an entity for which the platform facilitated more than two thousand property rentals over the period. The fourth is a threshold, and the most widely misread.

A small seller of goods is excluded only where the platform facilitated fewer than thirty sales of goods for that seller and the total consideration did not exceed two thousand euros over the period. The two limits are cumulative: the frequently asked questions state it and give the example, twenty-nine sales for two thousand euros or less over 2023 means exclusion. Thirty sales for one hundred euros, conversely, makes a reportable seller.

No comparable threshold exists for the three other relevant activities: a single property rental, a single personal service, a single vehicle rental facilitated for an identified seller opens the reporting duty. Reading the thirty-sales and two-thousand-euro threshold as a general exemption is the costliest mistake under this regime, because it causes a whole deadline to be missed.

What information must the platform collect and report?

The DAC7 return brings together two blocks of data in Luxembourg: the identification of the platform operator itself and, for each reportable seller, the items produced by the due diligence, the financial account identifier and the consideration received, broken down by quarter.

On the operator's side the list runs to five items: the name, the registered office address, the tax identification number, the individual identification number allocated at registration and the business names of the platforms operated. The administration specifies that the platform's VAT number is not required, identification being already secured by the tax identification number or the individual identification number.

On the seller's side, three points deserve to be retained. The financial account identifier is mandatory as soon as the platform holds it, unless the seller's Member State of residence has publicly notified that it does not intend to use that information. The seller's VAT identification number is to be collected only where the seller provides it in the course of the relevant activity, and, where several exist, the one of the State in which the seller has established its primary address is preferred. Lastly, the total consideration is reported by quarter, together with the number of relevant activities.

The definition of that consideration most often misaligns the return with the accounts: it is the amount net of fees, commissions or taxes withheld or charged by the platform operator. The figure the seller reads on its statement, the figure reported to the administration and the revenue recorded in the accounts may therefore be three different amounts. We document the gap once, in writing, the statement line labels set against the accounts.

Article 5 further requires a register of the information collected to be kept for ten years following the reporting period, with the necessary procedures and controls. Ten years is not the period a finance function spontaneously applies to operational data: a platform that aligns its archiving on its accounting obligations ends up, under audit, without the records that support its returns.

What is the DAC7 timetable: registration, due diligence, reporting?

The DAC7 timetable in Luxembourg runs to three deadlines: registration no later than the start of the activity, due diligence completed by 31 December of the reporting period, and filing by 31 January of the following year.

Registration is made with the Administration des contributions directes through MyGuichet.lu, with LuxTrust or electronic identity card authentication. Any change to the information given at initial registration must be notified no later than one month after it occurred, through the same procedure. A change of name, of registered office address or of platform perimeter therefore does not wait for the annual return.

Due diligence must be completed no later than 31 December of the reporting period. For sellers already registered on the platform on 1 January 2023, the regime's first year, the deadline had been extended to 31 December 2024. The operator may entrust those procedures to a service provider but remains responsible for them: that is worth writing into the outsourcing contract rather than discovering it in the course of an audit.

Filing is electronic and mandatory, either through the MyGuichet.lu online procedure or by submitting an XML file. A pre-validation step checks the file against the XSD schema and a set of business rules before final submission; the schemas and the user manual are published in the electronic exchanges section. The first campaign, for 2023, had exceptionally been deferred to 19 February 2024: that deferral was due to the late opening of the procedures and is no standing tolerance.

Which fines sanction a DAC7 breach in Luxembourg?

DAC7 breaches in Luxembourg are sanctioned at two levels: a flat fine of five thousand euros for a late or missing registration, notification or return, and a fine of up to two hundred and fifty thousand euros established in the course of an audit.

The split between the two is not intuitive. The flat EUR 5,000 fine covers the deadlines, whether for registration, notification or reporting, and it also applies to incorrect information supplied at registration. The EUR 250,000 ceiling targets the breach of the due diligence and reporting obligations established under audit, and the frequently asked questions specify that it does not target the obligations relating to the registration, notification and reporting deadlines.

One point must be read without hope of accommodation: the offence exists as soon as the legal deadline is missed, irrespective of any intention. That is what brings the sanction mechanism close to that of DAC6 and of the CRS and FATCA exchanges, where the sanction strikes the calendar before the substance. For a platform company with twelve thousand euros of capital, a two-hundred-and-fifty-thousand-euro fine is moreover not a compliance incident but a balance sheet event, which opens the question of the loss of half the share capital.

What the law of 27 March 2026 changes for platform operators

The law of 27 March 2026, which transposes Directive (EU) 2023/2226 known as DAC8, amends the DAC7 law of 16 May 2023 and applies from 1 January 2026: it introduces an identification service made available by a Member State or by the Union, whose identifier must be transmitted in the return.

The counterpart of that service is relief downstream. Where the operator uses it, the Administration des contributions directes is no longer required to transmit certain seller data to the competent authority of the other Member State, including the primary address and the tax identification number. The text also adds a letter m) to article 6 of the DAC7 law and amends its annex.

The legislative path is settled. Bill 8592, deposited on 24 July 2025, was passed in public session on 19 March 2026 by sixty votes to nil, and the Council of State waived the second constitutional vote on 27 March 2026. The law amends five tax laws, including the law of 16 May 2023 on platform operators.

One reservation on dates must be flagged, because it affects the very citation of the text. The 2026 legislation page of the Administration des contributions directes presents it as the law of 27 March 2026, published in Mémorial A no. 144, whereas the record of parliamentary file 8592 gives 30 March 2026 as the publication date. We retain the date of the law and flag the discrepancy rather than settle it.

What DAC7 changes for a seller established in Luxembourg

For a seller established in Luxembourg, DAC7 creates no tax but removes an information asymmetry: the Administration des contributions directes receives, ahead of the taxpayer's own return, the quarterly consideration the platforms paid out.

The practical consequence is reconciliation work, not recharacterisation: income from an activity facilitated by a platform was already taxable according to its nature, commercial profit, rental income or miscellaneous income. What changes is the likelihood that the gap between what is reported and what is transmitted will be seen, and the fact that the transmitted amount is net of commissions, hence different from the bank receipt.

The directive requires each Member State to lay down rules obliging reporting operators to inform reportable sellers of the consideration reported. The Luxembourg modalities of that information could not be verified during drafting. A seller who receives nothing from its platform should therefore not conclude that it has not been reported: it can ask the operator for the quarterly detail that will be transmitted.

The order of magnitude we see on assignments is consistent: rebuilding a history of platform statements over a closed year costs several times the time of a reconciliation kept quarterly, and that extra cost is avoidable. Our accounting pricing is set on the second assumption.

Sources and verification

Written for Financial Services Luxembourg and reviewed before publication by Mickaël LOC, licensed accountant (authorisation 10077274). Sources verified on 13 October 2026: every threshold, deadline, fine amount, date and legal reference in this article was checked that day against an official Luxembourg or European source, and no value was taken from memory.

The sources consulted, all read on 13 October 2026, fall into three sets.

The administration first: the page on information to be reported by platform operators (DAC7 law) in the electronic exchanges section of the Administration des contributions directes, for the scope, the 31 January deadline and pre-validation; the DAC7 frequently asked questions of the same administration, for the relevant activities, the excluded sellers, the content of the return, the registration of the excluded operator, the ten-year register of article 5 and the two levels of sanction; its newsletters of 12 June 2023, 19 January 2024 and 16 September 2024; its 2026 legislation page, for the law of 27 March 2026. The procedures next: the Guichet.lu page on registering a platform operator. The parliamentary record last: the consolidated file of bill 8592 of the Chamber of Deputies. Directives (EU) 2021/514 and (EU) 2023/2226 were read on EUR-Lex.

Five points could not be verified and are flagged as such in the article: the consolidated text of the law of 16 May 2023, whose article numbering could not be read beyond articles 5 and 6; the exact wording of the more-than-two-thousand-rentals case, the property listing concept used by the directive not being traceable in the national text; the Luxembourg modalities of informing the seller; the Mémorial publication date of the 2026 text, the two sources diverging between 27 and 30 March; and the version of the XSD schema for the 2026 period.

The reader can check these on the DAC7 page and frequently asked questions of the administration, on Guichet.lu, on the coordinated text published by Legilux and on file 8592.

This article sets out the state of the law at the date of publication and does not constitute personalised tax or legal advice: a specific situation calls for its own review, in particular to characterise a business model as a reporting or excluded platform operator and to settle the perimeter of reportable sellers. Report an error to contact@financialservices.lu: the correction is dated in the article.