From Pillar 2 to DAC6 to real-time reporting, the rules of corporate tax compliance are being rewritten — and the penalties for falling behind are no longer just financial
Key takeaways:
-
-
-
Mandatory compliance mandates are growing — Pillar 2, DAC6, and other real-time reporting mandates are increasing obligations in dozens of jurisdictions today, and those tax departments without the infrastructure to meet these obligations are already behind.
-
Real-time documentation is critical — The window between a transaction occurring and a tax authority scrutinizing it is shrinking to near zero in some markets, meaning that documentation must exist at the moment it is generated, not reconstructed afterward.
-
Data quality is compliance quality — Real-time compliance brings with it heightened pressure to avoid incomplete or inconsistent inputs, because increasingly sophisticated analytics used by tax authorities will find them.
-
-
In 2023, a major European manufacturer was hit with a seven-figure penalty not because its tax return was wrong, but because it couldn’t demonstrate how it arrived at the right answer. No documented governance framework, no clear ownership, and no audit trail. The numbers were defensible, but the process wasn’t.
That gap — between getting the right answer and being able to prove it — is where corporate tax risk now lives.
Governments and tax authorities worldwide are no longer waiting for companies and their in-house tax departments to self-report accurately. They are building legal frameworks, digital infrastructure, and enforcement mechanisms to verify compliance in real time. And for tax departments accustomed to managing compliance on their own terms, the window for a comfortable transition is closing fast.
A global tightening
Tax governance requirements are intensifying on multiple fronts. In the United States, for example, the IRS’s Large Business & International division has significantly expanded its compliance campaigns, targeting transfer pricing, research & development (R&D) credits, and multinational structures. Section 174 of the 2017 Tax Cuts and Jobs Act now requires companies to amortize R&D expenditures over five or 15 years depending on where research occurs — a change that many tax departments are still working through while absorbing new obligations on top of it.
Internationally, the pace is faster still. The framework that the Organisation for Economic Co-operation and Development (OECD) created for its base erosion and profit shifting (BEPS) rules has been adopted by more than 135 countries. Pillar 2 — the global 15% minimum corporate tax rate — is already in effect in dozens of jurisdictions and is actively reshaping how multinationals structure their tax affairs. These are not coming changes — they are current ones.
Mandatory disclosure regimes have expanded in parallel. The European Union’s DAC6 directive requires intermediaries and taxpayers to report potentially aggressive cross-border arrangements, with penalties in some member states reaching hundreds of thousands of euros. The United Kingdom’s Senior Accounting Officer regime goes even further, placing personal legal accountability on named senior executives for the adequacy of their company’s tax accounting arrangements. Similar regimes are expanding in Australia, Canada, and Brazil.
These are not isolated experiments. They represent a coordinated, durable shift toward tax transparency that is not going to reverse any time soon.
The real-time reporting challenge
That means, corporate tax departments must respond to this shift because the traditional audit model — authorities review historical returns and request documentation years later — is being replaced in a growing number of markets. Spain, Hungary, and South Korea already require taxpayers to submit transactional data directly to tax authorities through mandatory electronic systems. The EU’s Value added tax (VAT) in the Digital Age initiative will extend similar requirements across all 27 member states beginning in 2028.
For tax departments, this reporting compression is the central operational challenge of the next five years. A team that once had 12 to 18 months to reconstruct documentation for an audit now needs that documentation to be accurate and defensible at the moment it is generated. That requires a fundamentally different operating model — not just better record-keeping, but automated data capture and real-time reconciliation built into core financial systems — along with the ability to transfer that documentation electronically in real time.
3 actions tax departments must take now
To begin to address this dramatic change, corporate tax departments need to act now, taking steps that include:
1. Building a formal governance framework
Tax departments need written governance frameworks that clearly define what party owns each compliance decision, how decisions are reviewed and approved, and what controls exist to catch errors before filing. This means named ownership of obligations, documented sign-off processes, and regular internal reviews against a compliance calendar.
In the UK, this is already a legal requirement under the SAO regime; and similar standards are emerging in Germany, Australia, and across the EU. A framework should cover at minimum; the ownership of each material filing obligation; the review and approval chain for positions taken; escalation procedures for uncertain tax positions; and a schedule for internal control testing. Without these processes in place, tax departments could face regulatory penalties, personal liability for senior leaders, and reputational damage that may be difficult to recover from.
2. Fixing the data access problem
Tax departments consistently lack reliable, timely access to the financial data they need. This is primarily an organizational problem, not a technology one. Tax functions often sit downstream from finance systems designed without tax requirements in mind — meaning data often arrives aggregated, reclassified, or stripped of the granularity needed for compliance work.
Solving this requires tax leaders to engage proactively with other corporate functions such as finance, IT, and business operations — not just to request data, but to influence how that data is captured at its source. That means participating in enterprise resource planning implementations, establishing data requirements for new business lines before they launch, and building direct feeds from source systems rather than relying on manual extracts.
3. Treating data hygiene as a compliance control
Tax authorities in the UK, the Netherlands, Germany, and the US are deploying advanced analytics to identify anomalies in corporate filings. Unexplained variances between statutory accounts and tax returns, inconsistencies in intercompany pricing, or mismatches between VAT and corporate income tax data could all trigger closer scrutiny.
Data hygiene must be treated as a compliance control, not an IT issue. In practice that means establishing reconciliation checkpoints between source data and tax inputs, maintaining documented data lineage so any figure in a return can be traced to its source, and conducting data quality reviews before filing deadlines — not after.
The bottom line
The regulatory trajectory is set, so that means the question for tax leaders whether their department will be ready when tested. Governance, data access, and data quality are no longer back-office concerns — they are the foundation upon which defensible compliance is now built.
Tax department leaders need to build that foundation now, before the examiner asks.
You can find out more about the challenges facing corporate compliance and risk teams here
