MiCA compliance
MiCA regulates crypto-asset service providers and the issuers of crypto-assets, asset-referenced tokens and e-money tokens in the EU. Its token rules apply since 30 June 2024 and the rest since 30 December 2024. Crypto-asset service providers are also financial entities under DORA.
- Markets in Crypto-Assets Regulation (MiCA)
- 2023/1114
- Requirements in the catalogue: 16
- Official text
What it requires
The main obligations in plain words, with the article or clause they come from.
-
Art. 59, Art. 65
Crypto-asset service providers need authorization, which then covers other EU countries after a notification.
-
Art. 6, Art. 16
A white paper for crypto-assets offered to the public; authorization for issuers of asset-referenced tokens.
-
Art. 70–72
Safeguard client crypto-assets and funds, handle complaints and manage conflicts of interest.
-
Art. 36–37, Art. 67
Own funds for service providers; a reserve of assets, held in custody, for issuers of asset-referenced tokens.
-
Art. 88–92
Disclose inside information, do not trade on it, and have arrangements to prevent and detect market abuse.
How Atitic covers it
What the product does for this framework, on the same records as every other.
-
The catalogue's requirements linked to your policies, evidence and owners.
-
DORA alongside: the crosswalk from DORA to MiCA, the ICT register and major incident reports with their deadlines.
-
Fasttrack marks MiCA as applying to crypto-asset service providers and issuers, and notes that DORA applies to service providers too.
What the catalogue holds
The areas of the framework in Atitic and how many requirements each holds. When you adopt it, each requirement becomes a row you own and link to policies, evidence and controls.
- Authorisation, scope and passporting4
- Governance, conduct and client protection4
- Prudential and reserve requirements3
- ICT security and operational resilience2
- Market integrity and abuse prevention3
Common questions
Does DORA apply to crypto-asset service providers?
Yes. Authorized crypto-asset service providers are financial entities under DORA, and MiCA relies on DORA for ICT risk management.
Can an authorization be used in other EU countries?
Yes. A crypto-asset service provider authorized in one country can serve clients in others after its authority has passed on a notification.
Does Atitic hold or move crypto-assets?
No. Atitic keeps the compliance records, policies and evidence; it does not touch client assets.
A summary for orientation, not legal advice. The official text is the reference.
Try it on your own data
Adopt MiCA in a free trial, link the evidence you already have and see what is still missing.
Start a free trial