{"schema":"https://policywatcher.online/schemas/evidence-packet/v1","schemaVersion":"1.0.0","mappingVersion":"2026-07-29.1","changeId":"472a92ae-24a8-4d9c-a47b-66f043669f57","screeningDate":"2026-07-07T02:34:58.026Z","publicationGate":"published","company":{"id":"c0caa75b-cc98-45c5-9b6b-198af2014025","name":"PayPal","slug":"paypal","industry":"FinTech"},"policy":{"id":"dc8f08a1-4c7e-4b31-a1cd-c3f8597c965a","name":"User Agreement","type":"terms","jurisdiction":"EU","sourceUrl":"https://www.paypal.com/lu/legalhub/paypal/useragreement-full"},"sourceConfidence":{"state":"review-required","lastCheckedAt":"2026-07-06T03:59:34.661Z","retrievalChannel":"seeded","dataStatus":"Available","publicSnapshotEvidence":true,"limitation":"Source confidence describes recorded retrieval and publication state. It does not rate the provider policy or certify source authenticity."},"snapshots":{"old":{"version":1,"sha256":"dcc651853121f39a69abe965fdc1aa7b74abee98a7ce2a4a039a11821a93bea1","capturedAt":"2026-07-06T07:20:37.478Z"},"current":{"version":2,"sha256":"3e217da9e7ae7a1db9b349adc236cadeadd301a3ed9218ab56117447e2280894","capturedAt":"2026-07-07T02:34:58.017Z"}},"assessment":{"summary":"No changes were found in this PayPal User Agreement update; it continues to detail service terms, account management, and regulatory compliance for Luxembourg users.","overallRisk":"Medium","overallScore":5,"previousPublicChange":null,"scoreDelta":null,"direction":"baseline","reasons":[{"icon":"info","textEn":"No changes were detected, so no new risks introduced by this update.","textIt":"Nessuna modifica rilevata, quindi nessun nuovo rischio introdotto da questo aggiornamento.","deltaScore":0,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":null,"anchorStatus":"not-recorded"},{"icon":"warning","textEn":"Continuous funding authority grants PayPal ongoing permission to charge linked sources.","textIt":"L'autorità di finanziamento continua concede a PayPal il permesso di addebitare le fonti collegate.","deltaScore":1,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":null,"anchorStatus":"not-recorded"},{"icon":"warning","textEn":"PayPal retains account data and electronic money post-closure for legal obligations.","textIt":"PayPal conserva i dati dell'account e la moneta elettronica dopo la chiusura per obblighi legali.","deltaScore":1,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":null,"anchorStatus":"not-recorded"}],"keyPoints":[{"textEn":"No changes detected in the User Agreement, ensuring continuity of terms for users.","textIt":"Nessuna modifica rilevata nel Contratto Utente, garantendo la continuità dei termini per gli utenti.","sentiment":"neutral"},{"textEn":"PayPal operates as a licensed bank in Luxembourg, supervised by the CSSF, ensuring regulatory compliance.","textIt":"PayPal opera come banca autorizzata in Lussemburgo, supervisionata dalla CSSF, garantendo la conformità normativa.","sentiment":"positive"},{"textEn":"Users grant continuous permission to charge linked funding sources for transactions and top-ups.","textIt":"Gli utenti concedono un'autorizzazione continua per addebitare le fonti di finanziamento collegate per transazioni e ricariche.","sentiment":"neutral"},{"textEn":"Account closure is available at any time, with a 14-day right of withdrawal for new accounts.","textIt":"La chiusura dell'account è disponibile in qualsiasi momento, con un diritto di recesso di 14 giorni per i nuovi account.","sentiment":"positive"}],"regionImpacts":[{"region":"EU","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Businesses must comply with specific terms for commercial accounts and potentially Commercial Entity Agreements. Regulatory oversight by the CSSF ensures adherence to EU financial laws.","complianceNoteEn":"PSD2, AMLD, CSSF Oversight"},{"region":"EU","perspective":"Individual","riskLevel":"Low","impactAnalysisEn":"This policy, specific to Luxembourg residents, aligns with EU financial regulations like PSD2 and e-money directives. Users benefit from a 14-day withdrawal right and strong consumer protections.","complianceNoteEn":"GDPR, PSD2, E-Money Directive"},{"region":"Global","perspective":"Enterprise","riskLevel":"Low","impactAnalysisEn":"Global businesses using PayPal in multiple regions must ensure compliance with each region's specific user agreement. This policy applies only to PayPal accounts of Luxembourg residents.","complianceNoteEn":null},{"region":"Global","perspective":"Individual","riskLevel":"Low","impactAnalysisEn":"While specific to Luxembourg, the principles of electronic money and payment services are globally relevant. Individuals outside Luxembourg should consult their local PayPal user agreement.","complianceNoteEn":null},{"region":"US","perspective":"Enterprise","riskLevel":"Low","impactAnalysisEn":"This policy is specifically for Luxembourg residents and does not directly apply to US businesses. US businesses are subject to different PayPal user agreements.","complianceNoteEn":null},{"region":"US","perspective":"Individual","riskLevel":"Low","impactAnalysisEn":"This policy is specifically for Luxembourg residents and does not directly apply to US individuals. US users are subject to different PayPal user agreements.","complianceNoteEn":null}],"explanationBoundary":"Score reasons and deltaScore values are stored AI-assisted screening outputs. Verified anchors confirm only that the quoted passage occurs in the named snapshot; they do not prove the interpretation."},"governance":{"boundary":"Mappings identify review relevance between recorded PolicyWatcher KPI fields and framework topics. They are not legal interpretations, conformity assessments, certifications or compliance verdicts.","mappings":[{"framework":{"id":"eu-ai-act","name":"Regulation (EU) 2024/1689 (EU AI Act)","shortName":"EU AI Act","referenceUrl":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","referenceVersion":"Official Journal text, 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, automated decisions, data use and human oversight review?","kpiFields":["kpiAiTrainingOptOut","kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAiTrainingOptOut","label":"AI training opt-out","value":"Not Available"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"}]},{"framework":{"id":"iso-42001","name":"ISO/IEC 42001:2023","shortName":"ISO/IEC 42001","referenceUrl":"https://www.iso.org/standard/42001","referenceVersion":"ISO/IEC 42001:2023 overview","reviewQuestion":"Which recorded policy statements may inform an AI management-system review of transparency, risk oversight and independent assurance?","kpiFields":["kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit","kpiRegulatoryCompliance"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"},{"field":"kpiRegulatoryCompliance","label":"Regulatory compliance","value":"Comprehensive"}]},{"framework":{"id":"nist-ai-rmf","name":"NIST AI Risk Management Framework 1.0","shortName":"NIST AI RMF","referenceUrl":"https://www.nist.gov/itl/ai-risk-management-framework","referenceVersion":"AI RMF 1.0; NIST revision in progress, checked 2026-07-29","reviewQuestion":"Which recorded policy statements may support Govern, Map, Measure or Manage review questions?","kpiFields":["kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness","kpiContentModeration"]},"status":"mapped","assessedCount":3,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"}]},{"framework":{"id":"oecd-ai-principles","name":"OECD AI Principles","shortName":"OECD AI Principles","referenceUrl":"https://oecd.ai/en/ai-principles","referenceVersion":"OECD AI Principles, updated 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, fairness, accountability and user agency review?","kpiFields":["kpiConsentMechanism","kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiConsentMechanism","label":"Consent mechanism","value":"Implicit"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"}]}]},"humanReviewQuestions":["Does the original User Agreement source still match the recorded public snapshot version 2?","Do the cited source passages support each displayed reason, KPI value and regional note?","Which advisory framework topics require specialist legal, risk or governance review for this use case?","Has a later public change superseded this packet before it is reused in a decision or publication?"],"methodologyUrl":"https://policywatcher.online/methodology/confidence","changeUrl":"https://policywatcher.online/change/472a92ae-24a8-4d9c-a47b-66f043669f57","boundary":"This packet records PolicyWatcher evidence and AI-assisted screening for one public change. It is not legal advice, a compliance verdict, a certification, or proof that the external source remains unchanged.","contentDigest":"4bbaa094f87c9ab4a9cd5853667d900fc4973bca287a56f175838085497a1112"}