Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The document states that Klarna collects app interaction data, linked bank transaction data, purchase history, preferred items, contact and identification information, financial details, device data, and interaction records for purposes including personalization, fraud prevention, and marketing.
This analysis describes what Klarna's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes a broad set of data categories collected by Klarna, including linked bank transaction data and behavioral and device identifiers, which collectively span financial, identity, and behavioral data types relevant to GLBA, CCPA, and GDPR compliance obligations.
Under these terms, Klarna collects linked bank transactions, device identifiers, app interaction data, purchase history, and financial details across multiple stated purposes including personalization, fraud prevention, credit assessment, and marketing communications. Consumers using the Klarna app or payment services provide or generate data across all of these categories.
Cross-platform context
See how other platforms handle Data Collection Scope and similar clauses.
Compare across platforms →Monitoring
Klarna has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We collect data on app interactions, past purchases, linked bank transactions, and preferred items to enhance the app experience and provide personalized offerings like tracking deliveries, price drop notifications, and financial overview. We record contact and ID information, financial details, device data, and interaction information to protect against fraud and money laundering. We keep records of prior purchases, interactions, and device details to send updates, offers, and product recommendations.Excerpt from Klarna's Privacy Policy
1) REGULATORY LANDSCAPE: The collection of linked bank transaction data and financial details implicates GLBA as Klarna describes itself as a bank, requiring appropriate notice and opt-out disclosures for NPI sharing. GDPR applies to EU users and requires a specified lawful basis for each processing purpose. CCPA applies to California residents and requires disclosure of categories of personal information collected. The FTC holds enforcement authority over unfair or deceptive data collection practices. 2) GOVERNANCE EXPOSURE: Medium. The document lists data categories at a summary level without specifying the legal basis for each processing activity or the precise retention periods, which may create gaps relative to GDPR's transparency requirements and CCPA's disclosure obligations. The collection of linked bank transaction data is operationally significant given its financial sensitivity. 3) JURISDICTION FLAGS: EU and EEA users are subject to GDPR, which requires explicit lawful bases for each processing purpose listed. California residents have CCPA rights including the right to know categories collected and the right to opt out of sale or sharing. UK users are subject to UK GDPR. The collection of financial data from US users implicates GLBA regardless of state. 4) CONTRACT AND VENDOR IMPLICATIONS: Organizations integrating Klarna as a payment vendor should assess whether their own privacy disclosures account for data flows to Klarna and whether applicable data processing agreements address the categories of data Klarna collects from shared customers. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should map each stated data category to its corresponding legal basis in the full Privacy Policy and verify that disclosures satisfy the category-level requirements of CCPA and the transparency requirements of GDPR Article 13 and 14. Data mapping exercises should include linked bank transaction data given its financial sensitivity.
This provision establishes a broad set of data categories collected by Klarna, including linked bank transaction data and behavioral and device identifiers, which collectively span financial, identity, and behavioral data types relevant to GLBA, CCPA, and GDPR compliance obligations.
Under these terms, Klarna collects linked bank transactions, device identifiers, app interaction data, purchase history, and financial details across multiple stated purposes including personalization, fraud prevention, credit assessment, and marketing communications. Consumers using the Klarna app or payment services provide or generate data across all of these categories.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Klarna.