Revolut · Revolut Privacy Policy · View original document ↗

Open Banking and Third-Party Financial Account Data Collection

Medium severity Medium confidence Explicitdocumentlanguage Unique · 0 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Revolut Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

If you choose to use Open Banking features, Revolut can access data from your accounts at other banks and financial institutions.

This analysis describes what Revolut's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Open Banking access gives Revolut visibility into your full financial picture across multiple institutions, which is more extensive than data collected solely from your Revolut account activity.

Interpretive note: The document does not fully detail which specific downstream uses are made of Open Banking data beyond service delivery, creating uncertainty about the full scope of its use in profiling or eligibility assessments.

Consumer impact (what this means for users)

This provision means that if you connect your other bank accounts through Open Banking, Revolut can collect and use your transaction history, balance information, and account details from those external accounts, which may be used in profiling, credit assessment, or product eligibility decisions.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Open the Revolut app, navigate to your account privacy settings, and review or revoke any Open Banking connections you have authorised. You can also contact dpo@revolut.com to request deletion of data collected via Open Banking.

How other platforms handle this

Groq Medium

We (or third parties acting on our behalf) may receive or collect additional information about you from public databases, partners, social media platforms, conference hosts, event companies, and other third parties that supplement the information we collect directly or automatically as described abo...

Anthropic Medium

Anthropic obtains personal data from third party sources in order to train our models. Specifically, we train our models using data from the following sources: Publicly available information via the Internet; Datasets that we obtain through commercial agreements with third party businesses; Data tha...

PlanetScale Medium

When you visit the Careers portion of our websites, we collect the information that you provide to us in connection with your job application. This includes but is not limited to business and personal contact information, professional credentials and skills, educational and work history and other in...

See all platforms with this clause type →

Monitoring

Revolut has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
give us access to your other financial accounts (for example, through Open Banking)

— Excerpt from Revolut's Revolut Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

(1) REGULATORY LANDSCAPE: Open Banking data collection in the UK is regulated under the Payment Services Regulations 2017 (implementing PSD2) and overseen by the FCA and the Open Banking Implementation Entity. Access to third-party account data requires explicit consumer consent and is subject to strict purpose limitation. UK GDPR applies to the personal data collected through Open Banking, requiring a documented lawful basis, typically consent or legitimate interests, for each use of that data beyond the immediate service delivery purpose. (2) GOVERNANCE EXPOSURE: Medium. The breadth of data accessible through Open Banking, including detailed transaction histories from other institutions, creates a significant data minimization and purpose limitation obligation. Using Open Banking data for purposes beyond the specific service the user connected their account for, such as profiling for unrelated product eligibility, may require separate consent or a clearly documented legitimate interests assessment. (3) JURISDICTION FLAGS: UK PSD2 implementation governs the access mechanism. If Revolut operates Open Banking-equivalent services in EEA jurisdictions through its EU entities, EU PSD2 and GDPR apply in parallel. Any transfer of Open Banking data to third countries triggers UK GDPR international transfer obligations. (4) CONTRACT AND VENDOR IMPLICATIONS: Where third-party Account Information Service Providers (AISPs) or Payment Initiation Service Providers (PISPs) are used to facilitate Open Banking access, data processing agreements must clearly delineate the scope of data access, permitted uses, and retention periods. (5) COMPLIANCE CONSIDERATIONS: Legal teams should confirm that the scope of data collected via Open Banking is clearly disclosed to users at the point of connection and that data minimization principles are applied, collecting only what is necessary for the stated purpose. Data retention schedules for Open Banking data should be reviewed against UK GDPR requirements.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • CFPB
    The CFPB has regulatory interest in Open Banking and consumer financial data sharing practices under its consumer financial protection mandate.
    File a complaint →

Applicable regulations

Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
ePrivacy Directive
European Union
FCRA
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
GLBA
United States Federal
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
UK GDPR
United Kingdom
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Revolut Privacy Policy
Entity
Revolut
Document last updated
May 5, 2026
Tracking information
First tracked
May 7, 2026
Last verified
May 9, 2026
Record ID
CA-P-007673
Document ID
CA-D-00538
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
3f454e91dd6036e21544d2d7f616cb24e6b62cdc91bd14ac3626b944cdb7ec1f
Analysis generated
May 7, 2026 09:22 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Revolut
Document: Revolut Privacy Policy
Record ID: CA-P-007673
Captured: 2026-05-07 09:22:24 UTC
SHA-256: 3f454e91dd6036e2…
URL: https://conductatlas.com/platform/revolut/revolut-privacy-policy/open-banking-and-third-party-financial-account-data-collection/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Revolut's Open Banking and Third-Party Financial Account Data Collection clause do?

Open Banking access gives Revolut visibility into your full financial picture across multiple institutions, which is more extensive than data collected solely from your Revolut account activity.

How does this clause affect you?

This provision means that if you connect your other bank accounts through Open Banking, Revolut can collect and use your transaction history, balance information, and account details from those external accounts, which may be used in profiling, credit assessment, or product eligibility decisions.

Is ConductAtlas affiliated with Revolut?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Revolut.