The French Financial Markets Authority ( Conseil d'Etat ) believes that the risk of a cyberattack on the registry of crypto-asset holders is very low

A company has challenged the validity of the decree requiring crypto-asset service providers to disclose the personal information of crypto-asset holders to the French taxadministration , so that this information can then be included in a European registry. This registry will centralize transaction data from all residents of European Union member states.

The company has also filed a motion for preliminary relief to have the decree suspended pending the Administrative Court of Appeal ( Conseil d'Etat ) ruling on its appeal.

She argued that there was an urgent need to suspend the latter, particularly because centralizing the data within the European registry would “significantly increase the risk of a data breach.”

Conseil d'Etat , however, will rule that the company has not provided evidence that centralizing the data would increase the risk of a data breach.

Above all, he points out that "the mere possibility of a risk, even one with a very low probability of occurring, does not in itself constitute an emergency."

The court thus dismisses the motion for preliminary relief, which does not necessarily foreshadow the position it will take when it rules on the company’s appeal regarding the validity of the decree.

CE, Summary Proceedings, Sept. 14, 2026, No. 519158, unpublished

This legal watch produced by Mispelon Avocat, a law firm specializing in French tax audit and French tax litigation. You can follow this legal watch subscribing to the newsletter via this link.