Austrian Cash Register Security Regulation (RKSV) is currently in its second phase of implementation (phase one – 2016 obligation to have cash register, record transactions and issue receipts, phase two – 2017, the cash register must additionally be equipped with a technical security device).
Michael Engelbert, public manager in Austrian Ministry of Finance declared this month: ”Introduction of RKSV, started with outrages opposition, but after year and half merchants have settled, although they still say its a bad idea. We estimate that 85 percent of merchants already have a cash register and data security solution. Income is rising, currently very strong. Is it caused by economic growth or by reduction of the gray economy, it cannot be precisely determined. “
Financial police goes to routine checks examining if sellers are issuing genuine receipts. When inspector detects a violation of the law, he/she will report it to the financial administration and it will initiate the tax audit.
From 1 April 2017, each receipt is provided with an electronic signature, represented in the form of 2D barcode (QR code). A signature creation unit signs data electronically by means of the taxpayer’s private key stored on it. The electronic signature ensures tamper protection.
- The signature creation unit belonging to the security device is to be purchased from a trust service provider that offers signature certificates, those are A-Trust, PrimeSign, and GlobalTrust GmbH.
- Cash register software must be compliant with regulation. Taxpayer must check it with software supplier.
- Initialization of the cash register by issuing first signed receipt with 0 sale amount.
- Registration of the signature card and the cash register via FinanzOnline. The installation (cash register and security device) must be registered with the fiscal authorities via FinanzOnline.
- Verification of the receipt means that the generated initialisation invoice has to be checked by the fiscal authorities after registration using the “BMF Belegcheck” smartphone app, available from App Store for Android and Apple iOS, or using a cash register function, if it supports the FinanzOnline “Cash register web service”.
This verifies whether the encrypted data can be correctly decrypted with the information disclosed to the tax authority, and whether the security device has consequently been successfully commissioned.
When the verification has been completed the cash register is set up, so it is tamper-proof. A signed (monthly) invoice must be created at the end of each month. The last monthly invoice of the calendar year (annual invoice) must furthermore be checked (using the “Cash register web service” or the “BMF Belegcheck” app), printed out and retained.
The cash register data acquisition log (Journal) must be backed up at least once a quarter in an unalterable form on an external medium, and the backups retained.
