On March 31st the ECON and LIBE committees of the EU Parliament has voted to require cryptocurrency service providers to collect personally identifiable information from individuals who transact more than 1,000 euros using cryptocurrency wallets, as opposed to leaving "their" tokens in exchanges. The rules are not yet law, but nothing is expected to derail the legislation.
Decentralized autonomous organizations (DAOs) are organizations constructed by rules encoded as a computer program running on a blockchain replicated all over the world. They are sometimes registered in some form, for example on July 1, 2021, Wyoming became the first US state to recognize DAOs as a legal entity. However the vast majority are not, and according to wikipedia have uncertain legal standing, and may functionally be a corporation without legal status as a corporation: a general partnership. They are controlled by owners of tokens voting on resolutions, and the results of the votes are implemented without further human intervention. The human interface with the token holders is via wallets, they are a crucial element of the technology.
In general partnerships the owners are jointly and severally liable for any legal actions and debts the company may face.
Does this mean that anyone who holds DAO tokens could be prosecuted and face legal sanction?