Provision record
Plaid · Plaid Terms of Use (Legal Index) · View original document ↗

Financial Data Access Authorization

High severity Common · 294 of 352 platforms
Get alerted the next time Plaid changes these terms. Follow Plaid →
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Plaid Monitor emails you the same day this changes. The archive stays free.
Follow Plaid →

Get the weekly research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.

Document Record

What it is

When you connect your bank account through an app powered by Plaid, you authorize Plaid to access your financial data — including account numbers, balances, and transaction history — and share it with the requesting application.

This analysis describes what Plaid's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This authorization is operationally necessary for Plaid to function as a data aggregation service, enabling the platform to retrieve account information from financial institutions and transmit data between systems on the user's behalf. The provision establishes the legal basis for Plaid's core service delivery mechanism.

Recent Activity

This document changed recently

Medium Apr 21, 2026

Developers who use Plaid's services now face expanded accountability for all activities on their accounts and stricter rules around who can access end-user financial data. If developers allow employees, contractors, or other agents to access their accounts, they must ensure those users only access data for approved business purposes and in compliance with Plaid's terms; Plaid reserves the right to monitor this activity through session replay and activity monitoring. Developers should audit which team members have account access, document the business need and approved use case for each, and ensure all authorized users understand their obligations under Plaid's terms.

View change record →
Medium Apr 19, 2026

Plaid's updated terms shift its business model from primarily connecting your accounts to third-party apps toward also providing direct consumer services, including account monitoring and alerts through a new web-based platform called Plaid Web-App. The terms now specify that your Plaid Account can store your financial and identity information, and that Plaid can use this data to provide its own streamlined services (like alerts and notifications) in addition to facilitating third-party app connections. This is not a privacy reduction, but a clarification that Plaid is now a service provider in its own right, not just an intermediary. You may want to review what the Plaid Web-App monitoring service entails and what data it collects, since it is a new direct service from Plaid rather than a third-party app feature.

View change record →
Medium Apr 16, 2026

Plaid has reframed its service model to emphasize a direct relationship between you and Plaid, rather than positioning itself primarily as a bridge to third-party apps. This means Plaid now states it provides services directly to you when you request them. Additionally, Plaid has introduced a new account monitoring and alerts service available via a web application directly to consumers, separate from third-party app integrations. The terms clarify that your Plaid Account remains non-transactional and does not store funds or enable direct payments, but now explicitly mentions it helps third-party apps initiate payments to or from you. You may wish to review the new web-based monitoring service offering and understand what account data it accesses and how it uses that data.

View change record →

Clause Stability Stable

0
Changes
4
Months Monitored
Apr 3, 2026
First Seen
Apr 17, 2026
Last Seen
This clause type exists across 4545 other provisions on other platforms.

Consumer impact (what this means for users)

Consumers grant Plaid broad access to sensitive financial account data each time they connect a bank account through a Plaid-powered app, and this data can be shared with multiple parties. The scope of data accessed may be broader than consumers expect from a simple 'connect your bank' prompt.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Export Your Data
    Visit my.plaid.com and sign in to view all applications that currently have access to your financial data through Plaid. You can review the scope of data shared with each connected app.

How other platforms handle this

Squarespace Medium

Each payment processor uses and processes your complete payment information in accordance with its applicable privacy policy (Stripe and PayPal).

Lime Medium

if you are accessing and using Lime Services under a corporate account...you acknowledge and agree that Lime may share certain of your usage information with whomever provided you with access to the Lime Services

Google Gemini Medium

Gemini Apps may share your precise location data with another Google service, like Google Maps, to fulfill your request.

See all platforms with this clause type →

Monitoring

Plaid has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.

Follow Plaid → Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
When you provide login data and additional information needed to connect your accounts, you also give Plaid permission and authority to act on your behalf to access and transmit data to and from your financial institution.

Excerpt from Plaid's Terms of Use (Legal Index)

ConductAtlas Analysis

Institutional analysis (regulatory & governance intelligence)

This provision implicates GLBA data sharing obligations, CFPB Section 1033 consumer financial data rights, and requires careful third-party risk management assessment for institutions whose customers use Plaid-connected applications.

Full institutional analysis

Regulatory citations, enforcement risk, and due diligence action items.

Applicable agencies

  • CFPB
    The CFPB regulates consumer financial data access rights under Dodd-Frank Section 1033, directly applicable to Plaid's data aggregation activities.
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FCRA
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
GLBA
United States Federal
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Plaid Terms of Use (Legal Index)
Entity
Plaid
Document last updated
May 5, 2026
Tracking information
First tracked
March 20, 2026
Last verified
March 20, 2026
Record ID
CA-P-000930
Document ID
CA-D-00170
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
67a00a54f78151f9002809d9fe30b260207684c021a931813b1db2e9645e46ae
Analysis generated
March 20, 2026 05:38 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Plaid
Document: Plaid Terms of Use (Legal Index)
Record ID: CA-P-000930
Captured: 2026-03-20 05:38:33 UTC
SHA-256: 67a00a54f78151f9…
URL: https://conductatlas.com/platform/plaid/plaid-terms-of-use-legal-index/provision/CA-P-000930/financial-data-access-authorization/
Accessed: July 25, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Related Analysis

Governance intelligence across arbitration, AI governance, data rights, indemnification, and retention

Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.

Frequently Asked Questions

What does Plaid's Financial Data Access Authorization clause do?

This authorization is operationally necessary for Plaid to function as a data aggregation service, enabling the platform to retrieve account information from financial institutions and transmit data between systems on the user's behalf. The provision establishes the legal basis for Plaid's core service delivery mechanism.

How does this clause affect you?

Consumers grant Plaid broad access to sensitive financial account data each time they connect a bank account through a Plaid-powered app, and this data can be shared with multiple parties. The scope of data accessed may be broader than consumers expect from a simple 'connect your bank' prompt.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 294 platforms. See the full comparison.

Is ConductAtlas affiliated with Plaid?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Plaid.