{"schema":"https://policywatcher.online/schemas/evidence-packet/v1","schemaVersion":"1.0.0","mappingVersion":"2026-07-29.1","changeId":"decc553e-ece4-43de-8d6e-4f4fedbf3a9a","screeningDate":"2026-08-02T11:30:57.027Z","publicationGate":"published","company":{"id":"c0caa75b-cc98-45c5-9b6b-198af2014025","name":"PayPal","slug":"paypal","industry":"FinTech"},"policy":{"id":"dc8f08a1-4c7e-4b31-a1cd-c3f8597c965a","name":"User Agreement","type":"terms","jurisdiction":"EU","sourceUrl":"https://www.paypal.com/lu/legalhub/paypal/useragreement-full"},"sourceConfidence":{"state":"review-required","lastCheckedAt":"2026-07-06T03:59:34.661Z","retrievalChannel":"seeded","dataStatus":"Available","publicSnapshotEvidence":true,"limitation":"Source confidence describes recorded retrieval and publication state. It does not rate the provider policy or certify source authenticity."},"snapshots":{"old":{"version":4,"sha256":"3e217da9e7ae7a1db9b349adc236cadeadd301a3ed9218ab56117447e2280894","capturedAt":"2026-08-01T04:37:27.841Z"},"current":{"version":5,"sha256":"dcc651853121f39a69abe965fdc1aa7b74abee98a7ce2a4a039a11821a93bea1","capturedAt":"2026-08-02T11:30:57.018Z"}},"assessment":{"summary":"No changes were found in the PayPal User Agreement, which continues to detail account terms, security, and consumer rights for Luxembourg residents.","overallRisk":"Medium","overallScore":5,"previousPublicChange":{"id":"a5804b9f-61b2-43cc-9cba-67391d428238","overallRisk":"Medium","overallScore":5,"screeningDate":"2026-08-01T04:37:27.848Z"},"scoreDelta":0,"direction":"unchanged","reasons":[{"icon":"info","textEn":"No interest earned on electronic money balances due to legal restrictions.","textIt":"Nessun interesse maturato sui saldi di moneta elettronica a causa di restrizioni legali.","deltaScore":0,"evidenceQuote":"You will not receive interest or any other earnings on the money in your account. This is because the money in your account is electronic money and applicable laws forbid paying interest on electronic money (for example, Directive 2009/110/","evidenceSide":"old","relatedKpi":null,"anchorStatus":"verified"},{"icon":"warning","textEn":"Users are liable for actions of authorized third-party service providers.","textIt":"Gli utenti sono responsabili per le azioni dei fornitori di servizi terzi autorizzati.","deltaScore":0,"evidenceQuote":"You are liable to us for the actions that you authorise the third parties to carry out. You will not hold us responsible for, and you will indemnify us from, any liability arising from the actions or inactions of such third parties in conne","evidenceSide":"old","relatedKpi":"kpiThirdPartySharing","anchorStatus":"verified"},{"icon":"info","textEn":"Account information may be retained after closure for legal obligations.","textIt":"Le informazioni dell'account possono essere conservate dopo la chiusura per obblighi legali.","deltaScore":0,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":"kpiDataRetention","anchorStatus":"not-recorded"}],"keyPoints":[{"textEn":"Users can withdraw from the agreement within 14 days or close their account anytime.","textIt":"Gli utenti possono recedere dall'accordo entro 14 giorni o chiudere il proprio account in qualsiasi momento.","sentiment":"positive"},{"textEn":"Users are liable for actions authorized to third-party service providers accessing their account.","textIt":"Gli utenti sono responsabili per le azioni autorizzate a fornitori di servizi terzi che accedono al loro account.","sentiment":"negative"},{"textEn":"Electronic money held in accounts does not accrue interest due to legal restrictions.","textIt":"Il denaro elettronico detenuto negli account non matura interessi a causa di restrizioni legali.","sentiment":"negative"},{"textEn":"PayPal may close accounts inactive for three years or due to suspected unauthorized access.","textIt":"PayPal può chiudere account inattivi per tre anni o per sospetto accesso non autorizzato.","sentiment":"neutral"}],"regionImpacts":[{"region":"EU","perspective":"Enterprise","riskLevel":"Low","impactAnalysisEn":"Businesses in Luxembourg benefit from clear regulatory oversight by the CSSF, but must comply with specific commercial entity agreements for card-funded payments.","complianceNoteEn":"PSD2, AMLD"},{"region":"EU","perspective":"Individual","riskLevel":"Low","impactAnalysisEn":"This policy is specifically for Luxembourg residents, ensuring strong consumer protection under EU financial regulations and the right of withdrawal. GDPR principles apply to personal data processing.","complianceNoteEn":"GDPR, PSD2"},{"region":"Global","perspective":"Enterprise","riskLevel":"Low","impactAnalysisEn":"Global enterprises must adhere to the PayPal User Agreement specific to their operating region, as this document is limited to Luxembourg-registered entities.","complianceNoteEn":"Not applicable"},{"region":"Global","perspective":"Individual","riskLevel":"Low","impactAnalysisEn":"Individuals outside the EEA are not covered by these terms and must refer to their local PayPal user agreements, which may differ significantly in consumer protections.","complianceNoteEn":"Not applicable"},{"region":"US","perspective":"Enterprise","riskLevel":"Low","impactAnalysisEn":"This policy does not apply to US businesses. US enterprises should refer to their specific regional PayPal agreements for relevant financial and operational terms.","complianceNoteEn":"Not applicable"},{"region":"US","perspective":"Individual","riskLevel":"Low","impactAnalysisEn":"This policy does not apply to US residents. US individuals should consult their specific regional PayPal User Agreement for applicable terms and consumer rights.","complianceNoteEn":"Not applicable"}],"explanationBoundary":"Score reasons and deltaScore values are stored AI-assisted screening outputs. Verified anchors confirm only that the quoted passage occurs in the named snapshot; they do not prove the interpretation."},"governance":{"boundary":"Mappings identify review relevance between recorded PolicyWatcher KPI fields and framework topics. They are not legal interpretations, conformity assessments, certifications or compliance verdicts.","mappings":[{"framework":{"id":"eu-ai-act","name":"Regulation (EU) 2024/1689 (EU AI Act)","shortName":"EU AI Act","referenceUrl":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","referenceVersion":"Official Journal text, 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, automated decisions, data use and human oversight review?","kpiFields":["kpiAiTrainingOptOut","kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness"]},"status":"mapped","assessedCount":3,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"}]},{"framework":{"id":"iso-42001","name":"ISO/IEC 42001:2023","shortName":"ISO/IEC 42001","referenceUrl":"https://www.iso.org/standard/42001","referenceVersion":"ISO/IEC 42001:2023 overview","reviewQuestion":"Which recorded policy statements may inform an AI management-system review of transparency, risk oversight and independent assurance?","kpiFields":["kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit","kpiRegulatoryCompliance"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"},{"field":"kpiRegulatoryCompliance","label":"Regulatory compliance","value":"Comprehensive"}]},{"framework":{"id":"nist-ai-rmf","name":"NIST AI Risk Management Framework 1.0","shortName":"NIST AI RMF","referenceUrl":"https://www.nist.gov/itl/ai-risk-management-framework","referenceVersion":"AI RMF 1.0; NIST revision in progress, checked 2026-07-29","reviewQuestion":"Which recorded policy statements may support Govern, Map, Measure or Manage review questions?","kpiFields":["kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness","kpiContentModeration"]},"status":"mapped","assessedCount":3,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"}]},{"framework":{"id":"oecd-ai-principles","name":"OECD AI Principles","shortName":"OECD AI Principles","referenceUrl":"https://oecd.ai/en/ai-principles","referenceVersion":"OECD AI Principles, updated 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, fairness, accountability and user agency review?","kpiFields":["kpiConsentMechanism","kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiConsentMechanism","label":"Consent mechanism","value":"Implicit"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"}]}]},"humanReviewQuestions":["Does the original User Agreement source still match the recorded public snapshot version 5?","Do the cited source passages support each displayed reason, KPI value and regional note?","Which advisory framework topics require specialist legal, risk or governance review for this use case?","Has a later public change superseded this packet before it is reused in a decision or publication?"],"methodologyUrl":"https://policywatcher.online/methodology/confidence","changeUrl":"https://policywatcher.online/change/decc553e-ece4-43de-8d6e-4f4fedbf3a9a","boundary":"This packet records PolicyWatcher evidence and AI-assisted screening for one public change. It is not legal advice, a compliance verdict, a certification, or proof that the external source remains unchanged.","contentDigest":"a81aba1e91ccee7938c9277e099c085cf86325b0b4adb13d024bedc39a8453cd"}