Hong Kong Passes Crypto Reporting Law With Data Collection Starting in 2027

Hong Kong’s Legislative Council passed legislation on November 4 to implement the OECD’s Crypto-Asset Reporting Framework, setting a timetable for collecting and exchanging tax information on crypto transactions. Relevant service providers will begin collecting the required data in 2027, with exchanges between Hong Kong’s Inland Revenue Department and partner jurisdictions starting in 2028. The law moves the city’s earlier commitment into an implementation phase with immediate preparation implications for affected businesses.

The same bill introduces amendments to the Common Reporting Standard, which governs financial-account information. That part follows a different schedule: the amended CRS takes effect in 2028, with information exchanges under the revised standard starting in 2029. Combining the two timetables would give providers and customers a misleading picture of when their respective obligations begin.

Collection comes before the first exchange

The most important operational distinction is between gathering information and transmitting it internationally. A first exchange in 2028 does not give providers until that year to start maintaining usable records. Hong Kong’s published implementation materials identify January 1, 2027 as the start of CARF requirements. Systems and customer procedures need to support the earlier collection stage if the later reporting is to be complete.

The government says the exchanges will be reciprocal and subject to confidentiality and data-security safeguards. It also says the Inland Revenue Department will issue guidance and has established a dedicated team to support industry implementation. Those commitments describe the intended administration of the framework; the technical work of applying it still falls on the organizations required to identify customers and report relevant activity.

For a provider, preparation is more than adding a field to an account-opening form. Information gathered from a customer must be connected to the correct account and transaction history. Updates need to flow through the reporting process without leaving inconsistent records. A platform that can execute a trade quickly does not automatically have the data controls needed to explain that trade accurately to a tax authority.

The framework follows services and transactions

CARF is designed to cover relevant crypto-asset service providers and reportable activity, rather than treating every use of blockchain technology as identical. Hong Kong’s published overview describes providers that, as a business, effect exchanges for customers, including intermediaries and trading platforms. Whether an organization falls within the rules depends on its activities and the applicable connection to the jurisdiction, not simply its preferred marketing label.

The OECD framework covers exchanges between crypto-assets and fiat currency, exchanges between crypto-assets, and relevant transfers. Reporting is structured by transaction category and asset. That design addresses a limitation of looking only at withdrawals into a bank account: a person can change an investment exposure by swapping one token for another without first converting the proceeds into cash.

For readers familiar with U.S. rules, our guide to U.S. crypto tax transactions provides a useful comparison of transaction types. It does not determine Hong Kong’s reporting obligations. A tax-information framework and the domestic rules used to calculate a person’s liability are related but separate systems, and a reportable event should not automatically be described as a new tax charge.

Reporting does not resolve every compliance question

Customer due diligence is central to the OECD framework because authorities need to connect reported activity with the appropriate taxpayer and jurisdiction. The OECD’s implementation guidance describes obtaining information such as self-certification of tax residence. The quality of that identification affects the usefulness of the transaction data that follows. Large volumes of records are less helpful if they are associated with incomplete or inconsistent customer details.

Businesses with operations in several markets also need to distinguish international standards from each jurisdiction’s implementation. A common framework is intended to make information exchange more consistent; it does not mean all countries begin collecting data in the same year or use an identical domestic filing process. Local guidance, effective dates and the applicable reporting connection remain part of the compliance assessment.

Our coverage of Hong Kong’s tokenized interbank settlement project concerns a different element of digital finance. Settlement infrastructure changes how transactions can be completed. CARF changes how information about relevant crypto activity is collected and shared. Progress on one does not remove the obligations associated with the other, and the two developments should not be mistaken for a single regulatory approval.

The practical test is whether the records reconcile

For customers, additional information requests can become a visible consequence of the framework. That does not establish that every customer owes additional tax, or that a provider is alleging misconduct. For operators, the challenge is to obtain the necessary information through a process customers can understand while maintaining secure handling of sensitive identity and transaction records.

The law’s passage establishes a clearer sequence: collection during 2027, initial CARF exchanges from 2028, and the amended CRS exchange cycle from 2029. The next implementation milestones will be the promised guidance, reporting procedures and providers’ readiness to reconcile their customer records with reportable activity. Those details will determine whether an international transparency commitment becomes a dependable operational system.