DAC6 compliance – Category A: Generic hallmarks – which transactions should you be aware of?

On 25 May 2018, the Economic and Financial Affairs Council of the European Union (ECOFIN) adopted the 6th Directive on Administrative Cooperation (the “DAC6”), requiring so-called tax intermediaries to report certain cross-border arrangements that contain at least one of the hallmarks as defined in DAC6.

Within DAC6, there are five different hallmark categories that represent an indication that a transaction may have a potential risk of tax avoidance.

This blog will focus on the category A hallmarks which are classified as generic hallmarks. These may include one of the following:

  1. Conditions of confidentiality: An arrangement where a taxpayer or participant is obligated not to disclose how an arrangement can secure a tax advantage vis-a-vis another intermediary or the tax authorities.
  2. Fee agreements: An arrangement where an intermediary receives a fee for their services based on the tax advantage calculation.
  3. Standardised documentation/structure: An arrangement where there is standardised documentation or structure and it is relevant to more than one taxpayer without the need for a customised implementation.

DAC6 – The main benefit test

It is important to note that each category A hallmark also requires that the main benefit test is met – this is a condition where the main benefit of a transaction is a tax advantage.

An example of a category A hallmark would be if a UK based law firm makes an agreement with a client that there are no upfront costs for the client until the client obtains a tax benefit, then the law firm will take a fee. As soon as the client receives a tax benefit, the law firm will earn 15% of the tax benefit as their fee.

Failure to report a cross border transaction under DAC6 will result in effective, proportionate and dissuasive penalties. DAC6 should therefore not be taken lightly.

DAC6 reporting and training solution

Screenshot showing a flowchart in the DAC6 course

If you think you or your organisation may be required to report under DAC6, then VinciWorks has a DAC6 reporting and training solution to help businesses understand their reporting obligations under DAC6 and keep track of their cross-border transactions. The customisable solution includes:

  • DAC6 reporting portal – a secure, enterprise-wide data management tool for recording cross-border tax arrangements that may need to be reported under DAC6
  • DAC6: Advanced – an interactive course that follows a flow-chart navigation and includes example scenarios to help users understand DAC6
  • DAC6: Fundamentals – a short course providing a fundamental understanding of DAC6 suitable for everyone in a business


How are you managing your GDPR compliance requirements?

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.

“In a world older and more complete than ours they move finished and complete, gifted with extensions of the senses we have lost or never attained, living by voices we shall never hear.”

Picture of James

James

VinciWorks CEO, VInciWorks

Spending time looking for your parcel around the neighbourhood is a thing of the past. That’s a promise.

How are you managing your GDPR compliance requirements?

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.

How are you managing your GDPR compliance requirements?

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.

GDPR added a significant compliance burden on DPOs and data processors. Data breaches must be reported to the authorities within 72 hours, each new data processing activity needs to be documented and Data Protection Impact Assessments (DPIA) must be carried out for processing that is likely to result in a high risk to individuals. Penalties for breaching GDPR can reach into the tens of millions of Euros.