{"schema":"https://policywatcher.online/schemas/evidence-packet/v1","schemaVersion":"1.1.0","mappingVersion":"2026-07-29.1","changeId":"e7bcfc89-09cc-4133-b686-84efac485e51","screeningDate":"2026-10-18T07:39:18.089Z","publicationGate":"published","company":{"id":"c0caa75b-cc98-45c5-9b6b-198af2014025","name":"PayPal","slug":"paypal","industry":"FinTech"},"policy":{"id":"9e09108f-4041-4c64-8e16-88543e1b7e43","name":"Privacy Statement","type":"privacy","jurisdiction":"US","sourceUrl":"https://www.paypal.com/us/webapps/mpp/ua/privacy-full"},"sourceConfidence":{"state":"verified-retrieval","lastCheckedAt":"2026-10-23T11:41:15.708Z","retrievalChannel":"direct","dataStatus":"Available","publicSnapshotEvidence":true,"limitation":"Source confidence describes recorded retrieval and publication state. It does not rate the provider policy or certify source authenticity."},"snapshots":{"old":{"version":10,"sha256":"4594897afb9c019070eab6f20914b54c3b15bd2ed19d39e6591bd521840b944f","capturedAt":"2026-10-09T02:47:13.615Z"},"current":{"version":11,"sha256":"6675d7186466d6b8e56d49e0d361fb8438095a384749fe059a30acdd9f660d39","capturedAt":"2026-10-18T07:39:18.073Z"}},"analysisLineage":{"status":"verified","requestSha256":"5b92914e11a7a47a3d811dad0ac5443c4c5749b0494e574bc573e6850ca81020","responseSha256":"07f22e3b18044404164466b94b4d8723430e97681912751e5be8220caee598e5","model":"gemini-3.5-flash-lite","promptVersion":"policy-analysis.v3-full-document","schemaVersion":"policy-analysis.schema.v2","inputCoverage":"complete","semanticCoverage":"not_measured","documents":{"old":{"sha256":"4594897afb9c019070eab6f20914b54c3b15bd2ed19d39e6591bd521840b944f","charLength":132432,"byteLength":132592,"rangeUnit":"utf16-code-unit","includedRanges":[[0,132432]],"excludedRanges":[]},"new":{"sha256":"6675d7186466d6b8e56d49e0d361fb8438095a384749fe059a30acdd9f660d39","charLength":132445,"byteLength":132605,"rangeUnit":"utf16-code-unit","includedRanges":[[0,132445]],"excludedRanges":[]}},"boundary":"Hash verification links retained inputs and the application SDK request. It does not prove provider execution, semantic completeness or legal correctness."},"captureLineage":{"old":{"provenance":"unknown","sourceUrl":null,"requestedUrl":null,"finalUrl":null,"capturedAt":"2026-10-09T02:47:13.615Z","urlDisclosure":"credentials-query-fragment-redacted"},"current":{"provenance":"captured","sourceUrl":"https://www.paypal.com/us/webapps/mpp/ua/privacy-full","requestedUrl":"https://www.paypal.com/us/webapps/mpp/ua/privacy-full","finalUrl":"https://www.paypal.com/us/legalhub/paypal/privacy-full","capturedAt":"2026-10-18T07:39:18.073Z","urlDisclosure":"credentials-query-fragment-redacted"}},"assessment":{"summary":"PayPal updated its UK registered office address and contact information with no changes to core data rights or AI usage.","overallRisk":"Low","overallScore":2,"previousPublicChange":{"id":"9dd157b3-34d5-4710-bcef-0d0368693145","overallRisk":"High","overallScore":7,"screeningDate":"2026-10-09T02:47:13.625Z"},"scoreDelta":-5,"direction":"lower","reasons":[{"icon":"info","textEn":"Update is limited to administrative address changes for UK operations.","textIt":"L'aggiornamento è limitato a modifiche di indirizzo amministrativo per le attività nel Regno Unito.","deltaScore":0,"evidenceQuote":"PayPal UK Ltd76 Upper GroundLondon, United Kingdom, SE1 9PZContact Online for Privacy queries","evidenceSide":"new","relatedKpi":"kpiRegulatoryCompliance","anchorStatus":"verified"},{"icon":"info","textEn":"Data retention periods and biometric storage policies remain identical.","textIt":"I periodi di conservazione dei dati e le politiche di archiviazione biometrica rimangono identici.","deltaScore":0,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":"kpiDataRetention","anchorStatus":"not-recorded"},{"icon":"info","textEn":"Cross-border data transfer mechanisms and safeguards are unchanged.","textIt":"I meccanismi e le tutele per il trasferimento transfrontaliero dei dati rimangono invariati.","deltaScore":0,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":"kpiCrossBorderTransfer","anchorStatus":"not-recorded"}],"keyPoints":[{"textEn":"Updated registered office address and contact details for PayPal UK Ltd.","textIt":"Aggiornato l'indirizzo della sede legale e i dettagli di contatto di PayPal UK Ltd.","sentiment":"neutral"},{"textEn":"No modifications to data collection categories or user privacy rights.","textIt":"Nessuna modifica alle categorie di raccolta dati o ai diritti di privacy degli utenti.","sentiment":"neutral"},{"textEn":"AI training and automated decision-making terms remain unchanged.","textIt":"I termini relativi all'addestramento dell'IA e ai processi decisionali automatizzati rimangono invariati.","sentiment":"neutral"}],"regionImpacts":[{"region":"EU","perspective":"Enterprise","riskLevel":"Low","impactAnalysisEn":"Enterprise clients in the EU operate under unchanged data controller and processing terms.","complianceNoteEn":"EU AI Act"},{"region":"EU","perspective":"Individual","riskLevel":"Low","impactAnalysisEn":"European users experience no functional changes to their GDPR rights or data processing scope.","complianceNoteEn":"GDPR Compliant"},{"region":"Global","perspective":"Enterprise","riskLevel":"Low","impactAnalysisEn":"Global merchant integrations and API agreements remain entirely unaffected by this revision.","complianceNoteEn":"Standard Terms"},{"region":"Global","perspective":"Individual","riskLevel":"Low","impactAnalysisEn":"Global users see only administrative updates regarding UK corporate contact information.","complianceNoteEn":"Global Standard"},{"region":"US","perspective":"Enterprise","riskLevel":"Low","impactAnalysisEn":"US business merchants face no new operational or reporting obligations under this update.","complianceNoteEn":"GLBA Compliant"},{"region":"US","perspective":"Individual","riskLevel":"Low","impactAnalysisEn":"US consumers retain identical CCPA privacy rights and financial disclosure opt-out options.","complianceNoteEn":"CCPA / GLBA"}],"explanationBoundary":"Score reasons and deltaScore values are stored AI-assisted screening outputs. Verified anchors confirm only that the quoted passage occurs in the named snapshot; they do not prove the interpretation."},"governance":{"boundary":"Mappings identify review relevance between recorded PolicyWatcher KPI fields and framework topics. They are not legal interpretations, conformity assessments, certifications or compliance verdicts.","mappings":[{"framework":{"id":"eu-ai-act","name":"Regulation (EU) 2024/1689 (EU AI Act)","shortName":"EU AI Act","referenceUrl":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","referenceVersion":"Official Journal text, 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, automated decisions, data use and human oversight review?","kpiFields":["kpiAiTrainingOptOut","kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness"]},"status":"mapped","assessedCount":3,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Mentioned"}]},{"framework":{"id":"iso-42001","name":"ISO/IEC 42001:2023","shortName":"ISO/IEC 42001","referenceUrl":"https://www.iso.org/standard/42001","referenceVersion":"ISO/IEC 42001:2023 overview","reviewQuestion":"Which recorded policy statements may inform an AI management-system review of transparency, risk oversight and independent assurance?","kpiFields":["kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit","kpiRegulatoryCompliance"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Mentioned"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"},{"field":"kpiRegulatoryCompliance","label":"Regulatory compliance","value":"Comprehensive"}]},{"framework":{"id":"nist-ai-rmf","name":"NIST AI Risk Management Framework 1.0","shortName":"NIST AI RMF","referenceUrl":"https://www.nist.gov/itl/ai-risk-management-framework","referenceVersion":"AI RMF 1.0; NIST revision in progress, checked 2026-07-29","reviewQuestion":"Which recorded policy statements may support Govern, Map, Measure or Manage review questions?","kpiFields":["kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness","kpiContentModeration"]},"status":"mapped","assessedCount":3,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Mentioned"}]},{"framework":{"id":"oecd-ai-principles","name":"OECD AI Principles","shortName":"OECD AI Principles","referenceUrl":"https://oecd.ai/en/ai-principles","referenceVersion":"OECD AI Principles, updated 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, fairness, accountability and user agency review?","kpiFields":["kpiConsentMechanism","kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiConsentMechanism","label":"Consent mechanism","value":"Explicit Opt-In"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Mentioned"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"}]}]},"humanReviewQuestions":["Does the original Privacy Statement source still match the recorded public snapshot version 11?","Do the cited source passages support each displayed reason, KPI value and regional note?","Which advisory framework topics require specialist legal, risk or governance review for this use case?","Has a later public change superseded this packet before it is reused in a decision or publication?"],"methodologyUrl":"https://policywatcher.online/methodology/confidence","changeUrl":"https://policywatcher.online/change/e7bcfc89-09cc-4133-b686-84efac485e51","boundary":"This packet records PolicyWatcher evidence and AI-assisted screening for one public change. It is not legal advice, a compliance verdict, a certification, or proof that the external source remains unchanged.","contentDigest":"6244eadab7c371c3bc2ffd8d7dff1a1d1035bf68bd868155e39190607c2b4786"}