{"schema":"https://policywatcher.online/schemas/evidence-packet/v1","schemaVersion":"1.0.0","mappingVersion":"2026-07-29.1","changeId":"17e72515-975d-43e8-b71f-7891b529f17c","screeningDate":"2026-07-19T03:55:20.809Z","publicationGate":"published","company":{"id":"eaf6c865-63a3-4c4f-bd2b-00eb6d0071d5","name":"Wise","slug":"wise","industry":"FinTech"},"policy":{"id":"6e4db68c-6998-43dd-83ba-08eeab76e7f9","name":"Privacy Policy","type":"privacy","jurisdiction":"EU","sourceUrl":"https://wise.com/gb/legal/privacy-notice-personal-en"},"sourceConfidence":{"state":"review-required","lastCheckedAt":"2026-07-06T03:59:34.661Z","retrievalChannel":"seeded","dataStatus":"Available","publicSnapshotEvidence":true,"limitation":"Source confidence describes recorded retrieval and publication state. It does not rate the provider policy or certify source authenticity."},"snapshots":{"old":{"version":1,"sha256":"41c09d5a016a2dc6609f19874fa889100503b4b01491458f99fab25637657eb1","capturedAt":"2026-07-06T07:20:57.040Z"},"current":{"version":2,"sha256":"24c8d27f01acbce767c162ffbe4ae8a7b84223110b9383a7dc9c2b7723d84475","capturedAt":"2026-07-19T03:55:20.801Z"}},"assessment":{"summary":"Wise's updated policy clarifies biometric data consent, adds fraud data from partners, and slightly softens AI interaction transparency.","overallRisk":"Medium","overallScore":6,"previousPublicChange":null,"scoreDelta":null,"direction":"baseline","reasons":[{"icon":"warning","textEn":"Biometric consent now \"where required by law,\" potentially reducing user control.","textIt":"Consenso biometrico \"ove richiesto dalla legge\", potenziale riduzione controllo utente.","deltaScore":1,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":null,"anchorStatus":"not-recorded"},{"icon":"info","textEn":"New fraud risk data from financial partners expands third-party data collection.","textIt":"Nuovi dati antifrode da partner finanziari ampliano la raccolta dati da terzi.","deltaScore":0.5,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":null,"anchorStatus":"not-recorded"},{"icon":"warning","textEn":"AI interaction transparency commitment slightly weakened.","textIt":"Trasparenza AI leggermente ridotta.","deltaScore":0.5,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":null,"anchorStatus":"not-recorded"}],"keyPoints":[{"textEn":"Biometric data consent is now explicitly \"where required by law,\" potentially broadening data use in some regions.","textIt":"Il consenso biometrico è ora \"ove richiesto dalla legge\", potenziando l'uso dei dati in alcune regioni.","sentiment":"negative"},{"textEn":"New collection of fraud risk data from financial partners enhances security but expands third-party data sources.","textIt":"Nuova raccolta di dati antifrode da partner finanziari migliora la sicurezza ma amplia le fonti terze.","sentiment":"neutral"},{"textEn":"Commitment to notify users about AI interaction is slightly weakened by removing \"always.\"","textIt":"L'impegno a notificare l'interazione con l'AI è leggermente attenuato rimuovendo \"sempre\".","sentiment":"negative"},{"textEn":"\"Behavioural biometrics\" renamed to \"User interactions\" without changing the data collected.","textIt":"\"Biometria comportamentale\" rinominata \"Interazioni utente\" senza cambiare i dati raccolti.","sentiment":"neutral"}],"regionImpacts":[{"region":"EU","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Enterprises using Wise should review their internal policies regarding biometric data and third-party fraud data sharing for GDPR compliance. The AI Act's transparency requirements may also become relevant for AI interactions.","complianceNoteEn":"GDPR Art. 28, AI Act"},{"region":"EU","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"The clarification on biometric data consent (\"where required by law\") could impact GDPR Article 9, potentially allowing processing under other legal bases. This might reduce the explicit consent requirement in some scenarios.","complianceNoteEn":"GDPR Art. 9"},{"region":"Global","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Global enterprises must ensure their internal compliance frameworks account for Wise's updated data practices, especially for cross-border data flows. Due diligence on third-party data sources is advised.","complianceNoteEn":"Cross-border Data"},{"region":"Global","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"Users globally face slightly broader data collection for fraud and a minor reduction in AI transparency commitment. It's important to stay informed about data practices.","complianceNoteEn":"Global Privacy Norms"},{"region":"US","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Businesses integrating with Wise should assess the expanded data sharing for fraud prevention against state-specific privacy laws. Ensuring proper data handling agreements is crucial.","complianceNoteEn":"State Privacy Laws"},{"region":"US","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"New fraud data collection and biometric consent nuances may affect CCPA/CPRA rights, especially regarding sensitive personal information. Users should review their privacy choices.","complianceNoteEn":"CCPA/CPRA"}],"explanationBoundary":"Score reasons and deltaScore values are stored AI-assisted screening outputs. Verified anchors confirm only that the quoted passage occurs in the named snapshot; they do not prove the interpretation."},"governance":{"boundary":"Mappings identify review relevance between recorded PolicyWatcher KPI fields and framework topics. They are not legal interpretations, conformity assessments, certifications or compliance verdicts.","mappings":[{"framework":{"id":"eu-ai-act","name":"Regulation (EU) 2024/1689 (EU AI Act)","shortName":"EU AI Act","referenceUrl":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","referenceVersion":"Official Journal text, 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, automated decisions, data use and human oversight review?","kpiFields":["kpiAiTrainingOptOut","kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAiTrainingOptOut","label":"AI training opt-out","value":"Not Available"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Mentioned"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Partial"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"}]},{"framework":{"id":"iso-42001","name":"ISO/IEC 42001:2023","shortName":"ISO/IEC 42001","referenceUrl":"https://www.iso.org/standard/42001","referenceVersion":"ISO/IEC 42001:2023 overview","reviewQuestion":"Which recorded policy statements may inform an AI management-system review of transparency, risk oversight and independent assurance?","kpiFields":["kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit","kpiRegulatoryCompliance"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Mentioned"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"},{"field":"kpiRegulatoryCompliance","label":"Regulatory compliance","value":"Comprehensive"}]},{"framework":{"id":"nist-ai-rmf","name":"NIST AI Risk Management Framework 1.0","shortName":"NIST AI RMF","referenceUrl":"https://www.nist.gov/itl/ai-risk-management-framework","referenceVersion":"AI RMF 1.0; NIST revision in progress, checked 2026-07-29","reviewQuestion":"Which recorded policy statements may support Govern, Map, Measure or Manage review questions?","kpiFields":["kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness","kpiContentModeration"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Mentioned"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Partial"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiContentModeration","label":"Content moderation","value":"Opaque"}]},{"framework":{"id":"oecd-ai-principles","name":"OECD AI Principles","shortName":"OECD AI Principles","referenceUrl":"https://oecd.ai/en/ai-principles","referenceVersion":"OECD AI Principles, updated 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, fairness, accountability and user agency review?","kpiFields":["kpiConsentMechanism","kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiConsentMechanism","label":"Consent mechanism","value":"Explicit Opt-In"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Mentioned"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"}]}]},"humanReviewQuestions":["Does the original Privacy Policy source still match the recorded public snapshot version 2?","Do the cited source passages support each displayed reason, KPI value and regional note?","Which advisory framework topics require specialist legal, risk or governance review for this use case?","Has a later public change superseded this packet before it is reused in a decision or publication?"],"methodologyUrl":"https://policywatcher.online/methodology/confidence","changeUrl":"https://policywatcher.online/change/17e72515-975d-43e8-b71f-7891b529f17c","boundary":"This packet records PolicyWatcher evidence and AI-assisted screening for one public change. It is not legal advice, a compliance verdict, a certification, or proof that the external source remains unchanged.","contentDigest":"7363f347766d47d3712ac337daa4316b4eaa3fb9d7105b9dac06d2b7c46086ae"}