Revolut · Revolut Terms of Service · View original document ↗

Data Sharing with Third Parties and Credit Reference Agencies

Medium severity Medium confidence Explicitdocumentlanguage Unique · 0 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Revolut Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

When you open or use a Revolut account, Revolut and its agents collect information about you and your finances, including running credit checks. How this data is used is set out in a separate Privacy Notice, which is incorporated by reference but not reproduced in these terms.

This analysis describes what Revolut's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Credit checks and identity verification create data footprints with credit reference agencies that could affect your credit file and ability to access financial products elsewhere. The full scope of data sharing is governed by a separate document, meaning consumers must review two documents to understand their data rights.

Interpretive note: The full scope of data sharing is governed by a separate Privacy Notice not reproduced in these terms, creating uncertainty about the complete range of third-party data recipients and legal bases for processing.

Consumer impact (what this means for users)

Revolut shares personal and financial data with third parties including credit reference agencies and fraud prevention organisations as part of account opening and ongoing compliance, which can affect your credit profile and financial data records held by those agencies.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Export Your Data
    You can download your transaction history and account data from the Revolut app at any time. To exercise broader data rights (access, erasure, portability) under UK GDPR, refer to the Revolut Privacy Notice at revolut.com/privacy-policy/ for the relevant contact method.

How other platforms handle this

Wise Medium

We may share your personal information with third parties, including service providers, financial institutions, regulatory authorities, and fraud prevention agencies, where necessary to provide our services, comply with legal obligations, or protect against fraud and financial crime.

Microsoft Medium

We share your personal data with your consent or as necessary to complete any transaction or provide any product you have requested or authorized. We also share data with Microsoft-controlled affiliates and subsidiaries; with vendors or agents working on our behalf for the purposes described in this...

Lime Medium

We may share your information with third-party advertising partners to provide you with targeted advertising. We also work with third-party analytics providers who help us understand how users interact with our Services. These third parties may use cookies, web beacons, and similar tracking technolo...

See all platforms with this clause type →

Monitoring

Revolut has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
When you ask us to open an Account, we or someone acting for us will ask for information about you and where the money you will put in your Account comes from. We do this for a number of reasons, including to check your credit score and identity, and to meet our legal and regulatory requirements. Our Customer Privacy Notice (accessible here) explains more about how we use your information for these and other purposes.

— Excerpt from Revolut's Revolut Terms of Service

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: This provision engages UK GDPR as implemented by the Data Protection Act 2018, the FCA's rules on customer due diligence under the Money Laundering Regulations 2017, and the Credit Reference Agency information notices framework. The ICO is the enforcement authority for data protection matters. The provision's reliance on a separate Privacy Notice means the legal bases for processing (legitimate interests, legal obligation, or consent) are not visible within the terms document itself, which may create transparency issues under UK GDPR Article 13. GOVERNANCE EXPOSURE: Medium. The practice of running credit checks and sharing data with fraud prevention organisations is standard in UK financial services and is required under AML regulations. However, the adequacy of disclosure depends on the Privacy Notice, and compliance teams should ensure that notice meets UK GDPR Article 13 requirements, including specifying data recipients, retention periods, and data subject rights. JURISDICTION FLAGS: UK GDPR applies to all Revolut Ltd customers. Customers in the EEA would be subject to GDPR under their relevant Revolut entity. California residents using a US Revolut entity may have additional rights under CCPA. The cross-border data transfer implications of centralised credit reference agency access should be assessed if Revolut processes data across jurisdictions. CONTRACT AND VENDOR IMPLICATIONS: Procurement teams assessing Revolut as a partner or supplier should request confirmation of the data processing agreements in place with credit reference agencies and fraud prevention organisations, and verify that data sharing arrangements are covered by appropriate UK GDPR Article 26 or 28 agreements. COMPLIANCE CONSIDERATIONS: The Privacy Notice should be audited to confirm it satisfies UK GDPR transparency requirements and accurately reflects all third-party data sharing categories. Data mapping should include the credit reference agency and fraud prevention organisation data flows. Consent mechanisms (where relied upon) and legitimate interests assessments (where applicable) should be reviewed for adequacy.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    Data collection and sharing practices with credit agencies and third parties engage consumer protection and privacy frameworks; the FTC is the closest applicable agency from the permitted list, though the ICO is the primary UK authority
    File a complaint →

Applicable regulations

Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FCRA
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
GLBA
United States Federal
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
UK GDPR
United Kingdom
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Revolut Terms of Service
Entity
Revolut
Document last updated
May 5, 2026
Tracking information
First tracked
May 7, 2026
Last verified
May 9, 2026
Record ID
CA-P-007394
Document ID
CA-D-00537
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
dd2855c2166101fdadb6a8e3e97b02fc79639d104ba68c524616a93402f8e564
Analysis generated
May 7, 2026 07:17 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Revolut
Document: Revolut Terms of Service
Record ID: CA-P-007394
Captured: 2026-05-07 07:17:45 UTC
SHA-256: dd2855c2166101fd…
URL: https://conductatlas.com/platform/revolut/revolut-terms-of-service/data-sharing-with-third-parties-and-credit-reference-agencies/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Revolut's Data Sharing with Third Parties and Credit Reference Agencies clause do?

Credit checks and identity verification create data footprints with credit reference agencies that could affect your credit file and ability to access financial products elsewhere. The full scope of data sharing is governed by a separate document, meaning consumers must review two documents to understand their data rights.

How does this clause affect you?

Revolut shares personal and financial data with third parties including credit reference agencies and fraud prevention organisations as part of account opening and ongoing compliance, which can affect your credit profile and financial data records held by those agencies.

Is ConductAtlas affiliated with Revolut?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Revolut.