{"schema":"https://policywatcher.online/schemas/evidence-collection/v1","schemaVersion":"1.0.0","asOf":"2026-10-01T19:55:28.950Z","selection":{"count":1,"limit":12,"companyCount":1,"jurisdictionCount":1,"changeIds":["e4f3732c-92f2-4a5d-a9b2-716fd9ebf183"]},"records":[{"changeId":"e4f3732c-92f2-4a5d-a9b2-716fd9ebf183","screeningDate":"2026-10-01T19:55:28.950Z","company":{"id":"c0caa75b-cc98-45c5-9b6b-198af2014025","name":"PayPal","slug":"paypal","industry":"FinTech"},"policy":{"id":"9e09108f-4041-4c64-8e16-88543e1b7e43","name":"Privacy Statement","type":"privacy","jurisdiction":"US","sourceUrl":"https://www.paypal.com/us/webapps/mpp/ua/privacy-full"},"sourceConfidence":{"state":"verified-retrieval","lastCheckedAt":"2026-10-01T19:55:28.939Z","retrievalChannel":"direct","limitation":"Source confidence describes recorded retrieval and publication state. It does not rate the provider policy or certify source authenticity."},"currentSnapshot":{"version":9,"sha256":"514f87b3a545a9dc2574a6a25f91556dd7e774bdedf318aba1e1be31a0473cba","capturedAt":"2026-10-01T19:55:28.943Z"},"assessment":{"summary":"PayPal's updated policy broadens data collection from third-party payment sources for non-account holders and introduces new data use for 'PayPal World transactions'.","overallRisk":"High","overallScore":8,"scoreDelta":2,"direction":"higher","reasons":[{"icon":"alert","textEn":"Expanded third-party data collection for non-account holders.","textIt":"Raccolta dati estesa da terze parti per i non titolari di conto.","deltaScore":2,"evidenceQuote":"or when you receive a payment from a PayPal account holder (through the Visa+ service or other third party wallets, payment networks, and processors) or a payment from a payor using the Hyperwallet services.","evidenceSide":"new","relatedKpi":"kpiDataCollection","anchorStatus":"verified"},{"icon":"alert","textEn":"New clause for 'PayPal World transactions' involving third-party data.","textIt":"Nuova clausola per 'transazioni PayPal World' con dati di terze parti.","deltaScore":2,"evidenceQuote":"We will use information from third parties, including third-party wallets, payment networks, and processors, to process PayPal World transactions.","evidenceSide":"new","relatedKpi":"kpiThirdPartySharing","anchorStatus":"verified"},{"icon":"warning","textEn":"Increased scope of third-party data sharing for payment processing.","textIt":"Ambito ampliato di condivisione dati con terze parti per l'elaborazione dei pagamenti.","deltaScore":1,"evidenceQuote":"We will use information from third parties, including third-party wallets, payment networks, and processors, to process PayPal World transactions.","evidenceSide":"new","relatedKpi":"kpiThirdPartySharing","anchorStatus":"verified"}],"explanationBoundary":"Score reasons and deltaScore values are stored AI-assisted screening outputs. Verified anchors confirm only that the quoted passage occurs in the named snapshot; they do not prove the interpretation."},"governance":{"mappedFrameworks":[{"id":"eu-ai-act","name":"EU AI Act","referenceVersion":"Official Journal text, 2024","referenceUrl":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","reviewQuestion":"Which recorded policy statements may be relevant to transparency, automated decisions, data use and human oversight review?"},{"id":"iso-42001","name":"ISO/IEC 42001","referenceVersion":"ISO/IEC 42001:2023 overview","referenceUrl":"https://www.iso.org/standard/42001","reviewQuestion":"Which recorded policy statements may inform an AI management-system review of transparency, risk oversight and independent assurance?"},{"id":"nist-ai-rmf","name":"NIST AI RMF","referenceVersion":"AI RMF 1.0; NIST revision in progress, checked 2026-07-29","referenceUrl":"https://www.nist.gov/itl/ai-risk-management-framework","reviewQuestion":"Which recorded policy statements may support Govern, Map, Measure or Manage review questions?"},{"id":"oecd-ai-principles","name":"OECD AI Principles","referenceVersion":"OECD AI Principles, updated 2024","referenceUrl":"https://oecd.ai/en/ai-principles","reviewQuestion":"Which recorded policy statements may be relevant to transparency, fairness, accountability and user agency review?"}],"boundary":"Mappings identify review relevance between recorded PolicyWatcher KPI fields and framework topics. They are not legal interpretations, conformity assessments, certifications or compliance verdicts."},"reviewQuestions":["Does the original Privacy Statement source still match the recorded public snapshot version 9?","Do the cited source passages support each displayed reason, KPI value and regional note?","Which advisory framework topics require specialist legal, risk or governance review for this use case?","Has a later public change superseded this packet before it is reused in a decision or publication?"],"links":{"change":"https://policywatcher.online/change/e4f3732c-92f2-4a5d-a9b2-716fd9ebf183","evidence":"https://policywatcher.online/evidence/e4f3732c-92f2-4a5d-a9b2-716fd9ebf183","json":"https://policywatcher.online/api/evidence-packet/e4f3732c-92f2-4a5d-a9b2-716fd9ebf183?format=json","pdf":"https://policywatcher.online/api/evidence-packet/e4f3732c-92f2-4a5d-a9b2-716fd9ebf183?format=pdf"},"evidencePacketDigest":"9cc1851f914b42ffc872f17eaacd792ceb7221e014acaa5e69df4bfdbec8122c","boundary":"This packet records PolicyWatcher evidence and AI-assisted screening for one public change. It is not legal advice, a compliance verdict, a certification, or proof that the external source remains unchanged."}],"reviewChecklist":["Confirm that each selected record is relevant to the intended review scope.","Open the provider source and exact Evidence Packet before relying on a summary.","Keep record-level limitations and advisory framework boundaries attached when reusing the bundle.","Check whether a later public change supersedes any selected record."],"boundary":"This collection groups selected public PolicyWatcher evidence records. It is not exhaustive market coverage, persistent team collaboration, legal advice, a compliance assessment or proof that an external source remains unchanged.","collectionId":"pwc_8247d557a0fcbd7e","contentDigest":"8247d557a0fcbd7ee821dec7af8939819f064194358e76a3cb65a2958e36cb67"}