News by topic
1. Amendment of FR0615 reporting rules
Status: VMI Order No VA-71 was adopted on 2026-10-23; the changes apply from 2026-10-24.
What changes: The rules for form FR0615 have changed. When filing or correcting pension contribution data for 2025 and later periods, check the special marking conditions and exceptions for field P9 of form FR0615P in the official version.
Who is affected: Legal entities reporting residents' pension accumulation contributions.
Practical steps: Update filing instructions and check the current rules before correcting 2025–2026 data.
Source: Source.
2. Update to Mano VMI usage rules
Status: VMI Order No VA-73 was adopted on 2026-10-27; it takes effect on 2026-11-25.
What changes: The rules for using Mano VMI electronic services are changing, affecting the administration of representation rights, contact details and receipt of electronic documents. Exact service conditions must be checked in the official order.
Who is affected: Taxpayers using Mano VMI and their representatives.
Practical steps: Check representation permissions and contacts, and assign responsibility for monitoring documents.
Source: Source.
3. Update to legal-entity registration data rules
Status: VMI Order No VA-74 was adopted on 2026-10-27; it takes effect on 2026-11-25.
What changes: The rules for updating legal-entity details in the Taxpayer Register are being revised. Registered contact, business-activity and representation data should be reviewed; specific reporting deadlines must be verified in the new text.
Who is affected: Legal entities and others covered by these registration rules.
Practical steps: Before entry into force, check records held by VMI and assign responsibility for reporting changes.
Source: Source.
4. VDAI guidance on personal data breach risks
Status: Methodological guidance published on 2026-10-26, not a new binding legal rule.
What changes: VDAI published a risk matrix covering the nature of the breach, data sensitivity and volume, identifiability and the severity and likelihood of consequences. It supports decisions on notification under existing GDPR obligations.
Who is affected: Data controllers assessing security incidents.
Practical steps: Use the risk matrix in incident procedures and document reasons and supporting evidence.
Source: Source.
5. VDAI guidance on photographs and videos
Status: VDAI FAQ published on 2026-10-23, not a new legal act.
What changes: An image is personal data if a person can be directly or indirectly identified. Pseudonymised data remain personal data, while properly anonymised data fall outside GDPR. The circumstances, including image enlargement and other identifiers, matter.
Who is affected: Organisations collecting, storing or publishing photographs and videos.
Practical steps: Before using images, document the assessment of identifiability, purpose and possible impact on people's rights.
Source: Source.