Revolut · Revolut Privacy Policy · View original document ↗

Open Banking and Third-Party Financial Account Data Collection

Medium severity Medium confidence Explicitdocumentlanguage Unique · 0 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Revolut Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

If you choose to use Open Banking features, Revolut can access data from your accounts at other banks and financial institutions.

This analysis describes what Revolut's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Open Banking access gives Revolut visibility into your full financial picture across multiple institutions, which is more extensive than data collected solely from your Revolut account activity.

Interpretive note: The document does not fully detail which specific downstream uses are made of Open Banking data beyond service delivery, creating uncertainty about the full scope of its use in profiling or eligibility assessments.

Consumer impact (what this means for users)

This provision means that if you connect your other bank accounts through Open Banking, Revolut can collect and use your transaction history, balance information, and account details from those external accounts, which may be used in profiling, credit assessment, or product eligibility decisions.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Open the Revolut app, navigate to your account privacy settings, and review or revoke any Open Banking connections you have authorised. You can also contact dpo@revolut.com to request deletion of data collected via Open Banking.

How other platforms handle this

Ledger Medium

At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.

Strava Medium

If we collect health information from these integrations (such as heart rate), we will not sell or use it for advertising or other similar purposes; we do not disclose it to third parties without your prior consent; and we will only use it for the specific purposes described in this Policy.

eBay Medium

We collect your personal data when you use our Services, create a new eBay account, provide us with information via a web form, add or update information in your eBay account, participate in online community discussions or otherwise interact with us.

See all platforms with this clause type →

Monitoring

Revolut has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
give us access to your other financial accounts (for example, through Open Banking)

— Excerpt from Revolut's Revolut Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

(1) REGULATORY LANDSCAPE: Open Banking data collection in the UK is regulated under the Payment Services Regulations 2017 (implementing PSD2) and overseen by the FCA and the Open Banking Implementation Entity. Access to third-party account data requires explicit consumer consent and is subject to strict purpose limitation. UK GDPR applies to the personal data collected through Open Banking, requiring a documented lawful basis, typically consent or legitimate interests, for each use of that data beyond the immediate service delivery purpose. (2) GOVERNANCE EXPOSURE: Medium. The breadth of data accessible through Open Banking, including detailed transaction histories from other institutions, creates a significant data minimization and purpose limitation obligation. Using Open Banking data for purposes beyond the specific service the user connected their account for, such as profiling for unrelated product eligibility, may require separate consent or a clearly documented legitimate interests assessment. (3) JURISDICTION FLAGS: UK PSD2 implementation governs the access mechanism. If Revolut operates Open Banking-equivalent services in EEA jurisdictions through its EU entities, EU PSD2 and GDPR apply in parallel. Any transfer of Open Banking data to third countries triggers UK GDPR international transfer obligations. (4) CONTRACT AND VENDOR IMPLICATIONS: Where third-party Account Information Service Providers (AISPs) or Payment Initiation Service Providers (PISPs) are used to facilitate Open Banking access, data processing agreements must clearly delineate the scope of data access, permitted uses, and retention periods. (5) COMPLIANCE CONSIDERATIONS: Legal teams should confirm that the scope of data collected via Open Banking is clearly disclosed to users at the point of connection and that data minimization principles are applied, collecting only what is necessary for the stated purpose. Data retention schedules for Open Banking data should be reviewed against UK GDPR requirements.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Monitor free for 14 days

Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.

Applicable agencies

  • CFPB
    The CFPB has regulatory interest in Open Banking and consumer financial data sharing practices under its consumer financial protection mandate.
    File a complaint →

Applicable regulations

Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FCRA
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
GLBA
United States Federal
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
UK GDPR
United Kingdom
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Revolut Privacy Policy
Entity
Revolut
Document last updated
May 5, 2026
Tracking information
First tracked
May 7, 2026
Last verified
May 9, 2026
Record ID
CA-P-007673
Document ID
CA-D-00538
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
3f454e91dd6036e21544d2d7f616cb24e6b62cdc91bd14ac3626b944cdb7ec1f
Analysis generated
May 7, 2026 09:22 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Revolut
Document: Revolut Privacy Policy
Record ID: CA-P-007673
Captured: 2026-05-07 09:22:24 UTC
SHA-256: 3f454e91dd6036e2…
URL: https://conductatlas.com/platform/revolut/revolut-privacy-policy/open-banking-and-third-party-financial-account-data-collection/
Accessed: June 28, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Revolut's Open Banking and Third-Party Financial Account Data Collection clause do?

Open Banking access gives Revolut visibility into your full financial picture across multiple institutions, which is more extensive than data collected solely from your Revolut account activity.

How does this clause affect you?

This provision means that if you connect your other bank accounts through Open Banking, Revolut can collect and use your transaction history, balance information, and account details from those external accounts, which may be used in profiling, credit assessment, or product eligibility decisions.

Is ConductAtlas affiliated with Revolut?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Revolut.