In review: digital markets, funding and payment services in Belgium
Fintech is gaining increasing importance in the Belgian market, especially in light of the presence of EU financial and legislative bodies in Brussels, and because of Brexit. Belgium is also the home of various fintech giants, such as payments system vendor Clear2Pay, smart cash-flow forecasting firm CashForce and the global provider of secure financial messaging services, Swift.2 Further, Belgium is the home country of various large market infrastructure players, such as Euroclear, Bank of New York Mellon, Mastercard and Lloyd's of London.
The majority of the rules applicable to the fintech sector stem from European initiatives such as:
Belgium has also adopted legislation targeting alternative funding platforms, which is of particular relevance to crowdfunding platforms. On 10 November 2021, the first regulation on crowdfunding services on a European level entered into force.3
While the regulatory financial services framework may prove to be quite overwhelming for new and sometimes inexperienced market participants, various initiatives have been taken to guide fintech companies through this jungle of regulations.ii Legal and regulatory climate
Although many fintech stakeholders have made their case to set up a regulatory sandbox (as in the UK), Belgium has not yet implemented such a sandbox.4 However, the financial regulators have identified fintech as an important focus of their supervisory activities and acknowledge that the financial regulatory framework plays a key role in accommodating both innovation and safety within the industry. Therefore, they have launched a joint FinTech Contact Point, serving as a single point of contact for the financial regulators (as further discussed in Section VI).5 Companies can raise questions regarding the provision of new and innovative financial products or services requiring a licence. Since its launch in 2016, there have been a considerable number of enquiries regarding various topics such as robo-advice, crowdfunding and cryptocurrencies.6
An important platform fostering and promoting the Belgian fintech sector is FinTech Belgium, a community for financial professionals, start-up entrepreneurs and investors.7 Apart from promoting the Belgian fintech sector in Belgium and abroad, FinTech Belgium seeks to establish an ongoing dialogue with financial regulators, and regularly organises conferences and seminars on fintech-related topics.
Generally speaking, Belgium can be considered a fintech-friendly jurisdiction.iii Tax incentivesGeneral
Belgian tax law does not provide for specific tax incentives for fintech companies. Nonetheless, there are several general tax incentives that are beneficial to fintech companies. Some of these measures are described below.Innovation income deduction
Belgian companies are subject to corporate income tax at a rate of 25 per cent. The innovation income deduction allows Belgian companies to deduct 85 per cent of the net income that they derive from qualified intellectual property, thus reducing the effective tax rate to 3.75 per cent. Software (original creations or derived works that fulfil a certain originality threshold) that did not generate any income before 1 July 2016 may qualify. In practice, it is advisable to request a binding opinion from the Belgian Federal Science Policy Office (Belspo) about whether the software qualifies. The innovation income deduction is based on a nexus approach; in other words, it will only be available to the extent that the company has itself incurred qualifying research and development (R&D) expenses that have given rise to the income derived from the software.Exemption for remittance of professional withholding tax
Companies have the obligation to withhold tax on the salaries they pay to their employees. They must remit the said tax to the Treasury as an advanced payment of the personal income tax owed by the employees. Belgium partially exempts certain companies from that obligation. This measure is aimed at granting these companies more oxygen with regard to cash flow. Micro or small companies that are less than 48 months old are exempt from remitting 10 per cent and 20 per cent, respectively, of the tax withheld. These companies must fall within the scope of the Belgian Act of 5 December 1968 regarding collective bargaining agreements.
A 'micro' company does not exceed more than one of the following criteria:
A 'small' company does not exceed more than one of the following criteria:
Companies involved in R&D activities may benefit from a partial exemption of 80 per cent of the withholding tax on remunerations paid to researchers holding specific academic degrees. This exemption may be limited in the case of certain academic degrees. The R&D programme must be notified to Belspo, and in practice it is advisable to request a binding advice from Belspo relating to the qualification of the R&D programme.Tax credit for R&D activities
Companies investing in R&D may opt to apply a tax credit of 25 per cent. The invested amount is the purchase or investment value of newly purchased or manufactured tangible or intangible assets, which are used for R&D activities in Belgium.Tax shelter start-ups and scale-ups
Individuals who wish to invest in a young company's equity may recover 25 per cent, 30 per cent or 45 per cent of the invested amounts by means of a tax reduction. This measure is aimed at supporting companies' efforts to raise capital from individual investors. This regime is subject to a series of conditions that must be met by both investors and target companies. The applicable conditions will differ depending on whether the company is between zero and four years old (start-up) or between five and 10 years old (scale-up).
An individual investor cannot invest more than €100,000 per year. Start-ups may not attract more than €250,000 through this regime. Scale-ups are limited to €500,000 (in aggregate with investments gathered previously as a start-up). The investment caps at start-up and scale-up level have been increased to, respectively, €500,000 and €1 million for investments made as from 1 January 2021. Investments may be made directly or indirectly through a crowdfunding platform or a public start-up fund.Withholding tax exemption for crowd-lending
Individuals who wish to invest in young, small companies through crowd-lending may benefit from a withholding tax exemption on the first interest income bracket of €15,630. This regime is subject to a series of conditions that must be met by the investors, target companies and crowdfunding platforms.
Regulationi Licensing and marketing
Financial supervision in Belgium is based on a twin peaks model, according to which there are two autonomous supervisors: the National Bank of Belgium (NBB) and the Financial Services and Markets Authority (FSMA). The NBB is responsible for the prudential supervision of individual financial institutions on both macro and micro levels, while the FSMA is responsible for the monitoring of the proper functioning, transparency and integrity of the financial markets as well as the supervision of unlawful offerings of products and financial services. Furthermore, Belgian banks are fully or partially subject to the supervision of the European Central Bank.
Belgian regulatory law does not provide for a special fintech licence. However, depending on their proposed business model and activities in Belgium, fintech companies may be subject to a licence under general financial regulation. A broad range of activities are regulated in Belgium, mostly stemming from EU legislation. These include the offering of banking services, investment services, money exchange services, payment services, issuance of electronic money, mortgage and consumer credits, insurance services, reinsurance activities and occupational retirement schemes, as well as the intermediation relating to most of these services. Both the NBB and the FSMA also regularly issue circulars and communications that apply to regulated entities.
Fintech activities in the payment sector are usually within the scope of the regulated activities of the provision of payment initiation services or account information services under the Belgian legislation implementing PSD II.
Asset management companies are subject to a licence granted by the FSMA under the Belgian legislation implementing MiFID II. To be granted a licence, the asset management company has to meet several requirements concerning legal form, capital, adequacy of the shareholder structure and professional and appropriate management. At present, there is no specific regulation concerning automated digital advisory in Belgium.
Special regulatory restrictions on marketing fintech services generally do not apply as long as the activities are not regulated or the products do not constitute financial instruments or securities. Restrictions may apply if regulated activities or products are commercialised, for instance under the Information Obligations Decree (as discussed in Section V.ii). Entities are, in general, prohibited from advertising without an appropriate licence. Specific rules also apply where marketing is performed through solicitation in Belgium (see Section II.ii). It is recommended that fintech companies explore specific marketing restrictions that may apply to their specific use case.ii Cross-border issues
Belgium has implemented the European passporting procedure, which allows firms to conduct activities and services regulated under European legislation in another Member State of the European Economic Area on the basis of an authorisation in its home Member State. Duly licensed entities in Belgium may therefore offer financial services in other Member States after notification to the host Member State, and vice versa. Financial services generally require a licence if they are offered in Belgium (directly or on a cross-border basis). The extent to which the provision and the marketing of financial services trigger licensing requirements under Belgian law should be assessed on a case-by-case basis. According to the Belgian regulators, financial services are being offered 'in Belgium' if: (1) the financial services are delivered or carried on in Belgium; or (2) the financial institution actively solicits orders from customers in Belgium by means of remote sales and marketing techniques or advertising.
Digital identity and onboardingi Digital identity
In Belgium, the government issues an identity card to all citizens that includes a digital identity (eID). The information contained on the eID is deemed official and certified by the government (as certificate authority). An integration with the eID is possible to read basic information regarding an individual. This digital identity can therefore be used for onboarding, and can also be used for electronic identification and authentication as well as for embedding a qualified electronic signature on electronic documents.
A number of Belgium's leading banks (Belfius, BNP Paribas Fortis, KBC/CBC and ING) and mobile network operators (Orange, Proximus and Telenet Group) created a mobile application, itsme, with a view to facilitating this identification, authentication and signatures. Initially, this could only be done on the basis of a Belgian bank account, but it has since been expanded and extended to also support the eID.
The eID is only available to Belgian citizens (irrespective of their nationality) and itsme is only available to holders of a Belgian bank account or a Belgian eID. Because of the eID's integration of certificates for qualified electronic signatures, it can be used for any contract or document, except specific documents provided for by law (e.g., there are specific conditions for the assignment of certain financial instruments).ii Digitised onboarding of clients
In the process of onboarding clients, 'obliged entities' have to assess the risk of money laundering and terrorist financing based on customer due diligence as set out by the Belgian Act of 18 September 2017 on the prevention of money laundering and terrorist financing and the restriction on the use of cash (the AML Act), which implements the AMLD into national law. Before the establishment of a business relationship or before carrying out certain transactions, obliged entities are required to identify the customer and verify the customer's identity, assess and obtain information on the purpose and intended nature of the business relationship and conduct ongoing monitoring of the business relationship.
Digitised onboarding of customers is possible, provided that the relevant entity complies with its know-your-customer requirements under the AML Act. In this respect, the AML Act states that when business relationships or transactions are entered into remotely without any further guarantees (such as electronic signatures), this constitutes an indication of a potentially higher risk. Where higher risks are identified, obliged entities must apply enhanced customer due diligence measures. Further, the entity should set up a process for electronic identification (in particular in accordance with the eIDAS Regulation8).
The AML Act specifically provides that, to identify and verify the customer's identity, obliged entities must use: (1) one or more pieces of evidence or reliable and independent sources of information; (2) where available, information obtained by electronic identification means (such as eID or itsme); and (3) where available, information obtained by relevant trust services as set out in the eIDAS Regulation (such as electronic signatures and electronic seals).9
Digital markets, payment services and fundingi Crowdfunding
Various types of crowdfunding platforms exist on the Belgian market:
Crowd-lending and equity-based crowdfunding are regulated in Belgium by the Belgian Act of 18 December 2016 on the recognition and definition of crowdfunding and containing various provisions on finance (the Crowdfunding Act).10
The Crowdfunding Act sets out the licensing and operating requirements for alternative funding platforms as well as the conduct of business rules that apply to the providers of alternative funding services. An alternative funding service, dubbed by the FSMA as 'the financial form of crowdfunding', is defined in Article 4(1) of the Crowdfunding Act as:[T]he service consisting of commercialising investment instruments, through a website or any other electronic means, issued by entrepreneur-issuers, starter funds or funding vehicles in the framework of an offering, public or otherwise, without the provision of an investment service regarding these investment instruments, with the exception of, as applicable, the following services: (i) provision of investment advice and (ii) receiving and transmitting orders.
Each individual or legal entity that professionally provides alternative funding services within the territory of Belgium is deemed an alternative funding platform pursuant to Article 4(2) of the Crowdfunding Act (unless the individual or legal entity is a regulated undertaking).
As regards peer-to-peer lending, the Belgian regulatory framework currently does not explicitly authorise direct lending by consumers to consumers (as individuals are not allowed to make a public call to borrow money).ii Payment services
The offering of payment services is a regulated activity in Belgium under the Belgian Act of 11 March 2018 on the legal status and the supervision of payment institutions and electronic money institutions, the access to the undertaking of payment service provider and to the activity of issuing electronic money, and the access to payment systems (the Payment Institutions Act), which implements PSD II. The Payment Institutions Act regulates the following payment services:
The exemptions as outlined under PSD II also apply in Belgium. The exemptions that are regularly invoked in the fintech sphere are:
Following the implementation of PSD II, banks are required to provide third parties (such as payment initiation or account aggregation providers) with access to a customer's account data, upon the latter's request. The main reason is to facilitate these new business models that depend heavily on access to this data.
Cryptocurrencies, initial coin offerings (ICO) and security tokensi Laws and regulations specifically targeting tokens and cryptocurrenciesGeneral
The Virtual Currency Exchange Services Act prohibits third-country virtual currency exchange and custodial wallet providers that are not registered with the FSMA from offering their services in Belgium (see below). The FSMA has issued a regulation, a communication and several press releases and warnings11 relating to cryptocurrencies or associated phenomena. The NBB has issued a circular. These texts, as discussed below, are the only forms of regulatory guidance in Belgium that specifically address tokens and cryptocurrencies.
At a meeting held on 18 June 2021, the Council of Ministers approved a preliminary draft royal decree on the status and the supervision of providers of exchange services between virtual and fiat currencies and custodian wallet providers. The draft royal decree aims to establish the rules and conditions for the registration with the FSMA of providers of virtual currency services established on Belgian territory, as well as the conditions for exercising these activities and the supervision thereof. With regard to the conditions for registration, this draft imposes requirements in terms of expertise and professional reliability, the absence of a professional ban and a shareholder base that guarantees sound and prudent management of the company. In addition, providers of virtual currency services must comply at all times with the provisions of the AML Act. The draft royal decree was submitted to the Council of State for its opinion but has not been made public yet.12Virtual Currency Exchange Services Act
On 21 February 2022, the act amending the AML Act to introduce provisions on the status and supervision of service providers for the exchange between virtual and fiat currencies and custodian wallet providers (the Virtual Currency Exchange Services Act) entered into force.
The Virtual Currency Exchange Services Act contains a prohibition on third-country (i.e., non-European Economic Area) virtual currency exchange and custodial wallet providers that are not registered with the FSMA offering their services in Belgium, subject to imprisonment (of one month to one year) or a criminal fine (of between €400 and €80,000), or both. The Act also brings all Belgian territory ATMs that enable the exchange of virtual currency against fiat currency within the FSMA's supervision. The parliamentary works do not define what it means for a third-country service provider to offer its services in Belgium. Generally speaking, the Belgian authorities do accept 'passive servicing' in other financial services matters, meaning that as long as no active soliciting of orders from customers in Belgium by means of remote sales and marketing techniques or advertising is pursued, a company is not presumed to offer its services in Belgium. Passive servicing is usually also accepted for existing clients. The Belgian regulator's position in relation to crypto exchange and custodial wallets is untested. Parliamentary discussions have also flagged that the extraterritorial enforcement of these sanctions will be very difficult in practice, as the inclusion of criminal penalties in a Belgian Act has no impact outside the Belgian jurisdiction if the third country does not actively cooperate in the prosecution. A similar statutory arrangement is also in place in the Netherlands, but is not yet enforced in practice either.Marketing Prohibition Regulation
On 3 April 2014, the FSMA issued the Regulation of the Financial Services and Markets Authority of 3 April 2014 on the prohibition on marketing of certain financial products to non-professional clients (the Marketing Prohibition Regulation), which entered into force on 1 July 2014.13 This Regulation prohibits professional marketing in Belgium to one or more retail clients of financial products, the return of which is directly or indirectly dependent on virtual money. 'Virtual money' is defined for the purposes of the Regulation as 'each form of non-regulated digital money without legal tender'. This definition comprises not only Bitcoin, but also other cryptocurrencies. The prohibition only applies in respect of derivatives of virtual money, not in respect of the virtual money itself.14Circular NBB_2019_20
On 13 March 2019, the Basel Committee issued a 'statement on cryptoassets'. In this statement, the Basel Committee warns of the risks related to cryptoassets. It then sets out the measures it expects banks to take if they acquire cryptoasset exposures or provide related services.
As a follow-up to the Basel Committee's statement, the NBB released Circular NBB_2019_20, on expectations regarding activities related to cryptoassets, on 19 July 2019.15 This is addressed to the financial undertakings under the NBB's supervision. The NBB deemed that the substance of the Basel Committee statement was also relevant for other financial undertakings. It therefore decided to issue Circular NBB_2019_20 to reiterate the Basel Committee's statement and to extend its scope to also include non-banks under its supervision.FSMA ICO Communication
On 13 November 2017, the FSMA issued a communication entitled 'Initial Coin Offerings (ICOs)' (with document number FSMA_2017_20: the FSMA ICO Communication).16 In this text, which is considered soft law, the FSMA endorses the statements by the European Securities and Markets Authority (ESMA) on ICOs, in which ESMA has determined that, depending on how ICOs are structured, various financial regulations, such as the Prospectus Directive, MiFID, the Alternative Investment Fund Managers Directive and the Market Abuse Regulation, may apply.17
The FSMA further states that the following legislation and regulations may apply to ICOs in Belgium:
The FSMA notes in its communication that the application of the above laws depends on the way in which the ICO in question is structured, and that this must be assessed on a case-by-case basis. While the FSMA does not expressly mention the criteria it may apply when undertaking this assessment, it does point out elsewhere in the communication that:[t]he characteristics of a token may be similar to:(i) investment instruments, given that they may provide rights, offer the prospects of revenues or returns, or involve a pooling of funds with a view to investment in tokens; (ii) a means of storage, calculation and exchange, given its convertibility into other tokens, cryptocurrencies or fiat money; and/or (iii) a utility token, given the access which the token provides to the product or service.
This corresponds to the classification of tokens and cryptocurrencies as either: (1) an investment token; (2) a cryptocurrency; or (3) a utility token; or any combination of these three variations, which is gaining traction among scholars and policymakers.18 Whereas thus far this trichotomy constitutes a merely descriptive classification, it can already provide a sense of the likelihood that the coin will fall within the ambit of one or another law (such as one of the laws discussed in Section V.ii).ii General laws and regulations that may apply to tokens and cryptocurrenciesGeneral
With the exception of the Marketing Prohibition Regulation, there are no Belgian (hard) laws or regulations that specifically target blockchain or cryptocurrencies. Consequently, any type of cryptocurrency, token or other asset created or transferred by means of distributed ledger technology, as well as any related service, must be analysed from the perspective of existing laws and concepts. Most Belgian financial laws do not materially deviate from the EU legislation they seek to implement and are therefore not discussed here. There are, however, some interesting deviations from or additions to the EU financial law framework, a selection of which is discussed below.Prospectus regime
The Belgian prospectus legislation, among others:
Unlike the old Prospectus Directive (2003/71/EC) and the new Prospectus Regulation (2017/1129), the Old Prospectus Act and the New Prospectus Act do not use the notion of 'securities' to determine the material scope of the prospectus regime. Instead, they use the significantly broader notion of 'investment instruments'. This latter concept includes securities, but also comprises a whole range of additional instruments (such as money market instruments, futures, forward rate agreements and equity swaps), as well as the residual category of 'all other instruments that enable a financial investment, irrespective of the underlying assets'.
Consequently, depending on the structure of the token issued in an ICO, there may be a high chance that the token qualifies as an investment instrument and therefore falls within the scope of the Belgian prospectus regime.19
The Belgian prospectus legislation also establishes an intermediation monopoly. Only the entities mentioned in Article 21, Section 1 of the New Prospectus Act, which are all regulated entities, are allowed to act as intermediaries for purposes of the placement of investment instruments within the territory of Belgium. Consequently, if a token qualifies as an investment instrument and is placed in Belgium, only regulated entities can act as intermediaries (with certain limited exceptions).20Consumer protection
If a token qualifies as an investment instrument for purposes of the prospectus legislation discussed above, the token will also qualify as a financial product and will thus fall within the ambit of, in particular, the Royal Decree of 25 April 2014 on certain information obligations in respect of the marketing of financial products to non-professional clients (the Information Obligations Decree).21 As its name suggests, this Decree provides for certain information obligations that must be complied with when professionally marketing financial products to retail clients.
Furthermore, when the service offered in respect of a token or cryptocurrency qualifies as a financial service, Book VI of the Belgian Code of Economic Law, containing various consumer protection provisions, applies.22 A financial service is defined in this Code as 'each banking service or service relating to lending, insurance, individual pensions, investments and payments'.iii Tax treatmentCorporate income tax
The Office for Advance Tax Rulings has recently confirmed that all gains from investments in cryptocurrencies and ICOs made by Belgian companies are taxable, and all losses are tax deductible.Personal income tax
The income tax treatment of investments in cryptocurrencies by individuals is subject to general tax rules and depends on the relevant facts and circumstances.
A capital gain realised within the framework of one's professional activity will be taxed as professional income at progressive rates ranging between 25 per cent and 50 per cent plus local charges. If the cryptocurrencies are held as private assets, the capital gains will be exempt from individual income tax if the sale qualifies as a normal act of management. If not, the capital gains will be taxable as miscellaneous income at a rate of 33 per cent plus local charges.
Legal certainty on the applicable tax treatment can be obtained by filing a ruling request with the Office for Advance Tax Rulings. This service has recently published a list of questions that should allow both the taxpayer and the tax authorities to determine the appropriate tax treatment.23VAT
As regards VAT, the European Court of Justice has ruled that the sale of non-traditional currencies falls under the same exemption as for transactions relating to traditional currencies.24 The Belgian VAT administration has included that decision in its administrative commentary without noteworthy remark.
Other new business modelsi Smart contracts
Self-executing contracts, or 'smart contracts', are in principle permitted under Belgian law. No specific legal framework has been established for this phenomenon. Therefore, common contract law applies. In Belgium, contracts can generally be concluded without formal requirements, subject to certain statutory exceptions (e.g., consumer credit contracts). The computer code making up a smart contract can thus in principle constitute a valid contract, provided the validity requirements under Belgian contract law are met.25 Some tentative attempts to analyse smart contracts under Belgian contract law have thus far been made, but a considerable degree of legal uncertainty remains.26ii Robo-advice
Automated investment advice, or 'robo-advice', is relatively popular in Belgium. Within Europe, Belgium had the third-largest national portfolio, with €386 million invested with robo-advisers, equivalent to €34 per capita, in 2018.27 Financial regulations, such as MiFID II, apply to automated investment advice as they do for non-automated investment advice. This sometimes causes slight vexation among market participants, who feel that regulatory requirements are applied too strictly to online platforms.28
Third-party websites comparing products or providing information about financial products are subject to data protection and competition rules. The vast majority of these rules are of EU origin. The GDPR applies and must be taken into account when users' personal data are being processed. Also, comparison platforms are in particular subject to the regime of Article 101 of the Treaty on the Functioning of the European Union and the EU regulations and case law in this respect.iii Fintech contact point
For new business models in the fintech realm, the FSMA launched a FinTech Contact Point in June 2016.29 This contact point is designed as a portal through which fintech entrepreneurs can contact the financial supervisor. This allows entrepreneurs to familiarise themselves with financial legislation and to ask any questions they may have. It also enables the FSMA to closely monitor fintech developments in Belgium. In April 2017, the portal launched by the FSMA evolved into a joint portal of the FSMA and the NBB. Fintech players, which are not necessarily aware of the twin peaks supervision model in Belgium, thus have a single point of contact; they do not need to find out in advance to which supervisor they need to ask their questions. Questions lodged with the fintech portal are managed jointly by the FSMA and NBB teams. Since the launch of the fintech portal in 2016, a considerable number of entrepreneurs have reached out to the supervisory authorities. Their questions cover a wide range of topics, such as cryptocurrencies, robo-advice, crowdfunding and price comparison.30
Intellectual property and data protectioni Intellectual property
Anything that is not a technical solution, including schemes, rules and methods for performing mental acts, playing games or doing business, and software as such, is excluded from patent protection. This does, however, not preclude software-based inventions that are implemented in hardware from patent protection, provided that all applicable conditions are fulfilled.
Software and business models may also be protected by copyright if they meet the originality requirement. For acquiring copyright protection, no formalities need to be fulfilled. Only the expression of the software or business model will be protected, and not the underlying ideas or principles.
The object and source code, architecture, structure and organisation of the software are considered the 'expression of the software'. A graphic user interface does not enable the reproduction of the software and is therefore not considered an expression of the software. Consequently, a graphic user interface cannot be protected under the Software Act, but only by common copyright law.
Unless otherwise specified in the employment contract, the employee that is the creator of an original work will own the copyright on that work. The same applies to contractors. With regard to software, however, there is a legal presumption that the employer is the copyright owner of the original software created by the employee.
No specific compensation regime is provided for by law, allowing parties to freely agree on potential compensation for any intellectual property created.ii Data protection
Fintech companies that are based in the EU, or that offer goods or services to natural persons (data subjects) in the EU or monitor their behaviour, have to comply with the principles and obligations of the GDPR and the Belgian Act of 30 July 2018 when processing personal data. If the client data consists of information relating to an identified or identifiable data subject, the data will be qualified as personal data.
Profiling refers to the creation and use of profiles of data subjects based on common characteristics (e.g., preferences, financial status). Depending on the objective of the profiling, it will be treated differently. The use of profiles to create recommendations and personalise the client experience, for instance, will not be treated the same way as the use of profiles to automatically reject credit applications or otherwise significantly impact the rights of the data subject.
In the first scenario, in other words, for a mere scoring or evaluation, the general rules of the GDPR will apply, and the specific requirements to carry out a data protection impact assessment (DPIA) may apply in Belgium (as well as elsewhere), depending on the other circumstances of the processing (e.g., data enrichment via other sources, scale of processing). For the second scenario, a DPIA will in any event be required under the GDPR, and specific requirements apply in relation to the permitted legal grounds for the processing, the categories of personal data that may be taken into account and data subject rights.
In each scenario, a risk assessment will be needed to determine whether the supervisory authority must be consulted in relation to the project.
European Data Protection Board Guidelines 06/2020 on the interplay of the second Payment Services Directive and the GDPR, published on 15 December 2020, aim to clarify the relation between PSD II and the GDPR.
Year in review
In 2021, the new European licensing regime for crowdfunding service providers was implemented and organised.
The caps that apply for investment in start-ups and scale-ups to benefit from the tax shelter regime have been increased as from 1 January 2021.
2021 was also the year in which a registration regime was prepared for providers of exchange services between virtual and fiat currencies, and custodian wallet providers. Legislative work resulted in the Virtual Currency Exchange Services Act and the related draft royal decree. These texts, among others, impose an obligation on certain crypto service providers to register with the FSMA before providing their services in Belgium. The FSMA has been busy preparing for this pending registration obligation.
Outlook and conclusions
Although there is no regulatory sandbox in place, and there are, to our knowledge, no plans to introduce this sandbox, Belgium can be seen as a fintech-friendly jurisdiction.
The Fintech Contact Point will continue to be helpful in guiding start-ups and established firms through the complex regulatory framework and the licensing process. Both the FSMA and the NBB tend to be approachable and supportive of new fintech business models, and we expect this to only increase in the future.
For crypto companies, the entry into force of the Virtual Currency Exchange Services Act and the related draft royal decree is something to take into account when doing business in Belgium.