{"schema":"https://policywatcher.online/schemas/evidence-packet/v1","schemaVersion":"1.0.0","mappingVersion":"2026-07-29.1","changeId":"2e62256f-eb3a-45c5-95ba-e7b297822af5","screeningDate":"2026-07-19T03:55:44.131Z","publicationGate":"published","company":{"id":"eaf6c865-63a3-4c4f-bd2b-00eb6d0071d5","name":"Wise","slug":"wise","industry":"FinTech"},"policy":{"id":"3e616451-ba60-46e6-9634-d5925da2d56a","name":"Privacy Policy","type":"privacy","jurisdiction":"Global","sourceUrl":"https://wise.com/gb/legal/privacy-notice-personal-en"},"sourceConfidence":{"state":"review-required","lastCheckedAt":"2026-07-06T03:59:34.661Z","retrievalChannel":"seeded","dataStatus":"Available","publicSnapshotEvidence":true,"limitation":"Source confidence describes recorded retrieval and publication state. It does not rate the provider policy or certify source authenticity."},"snapshots":{"old":{"version":1,"sha256":"41c09d5a016a2dc6609f19874fa889100503b4b01491458f99fab25637657eb1","capturedAt":"2026-07-06T07:20:59.096Z"},"current":{"version":2,"sha256":"24c8d27f01acbce767c162ffbe4ae8a7b84223110b9383a7dc9c2b7723d84475","capturedAt":"2026-07-19T03:55:44.125Z"}},"assessment":{"summary":"Wise's updated policy increases data sharing for fraud prevention and slightly reduces its explicit commitment to AI transparency, impacting user privacy.","overallRisk":"Medium","overallScore":6,"previousPublicChange":null,"scoreDelta":null,"direction":"baseline","reasons":[{"icon":"warning","textEn":"New clause for collecting fraud risk data from financial partners.","textIt":"Nuova clausola per la raccolta di dati sul rischio di frode da partner finanziari.","deltaScore":1,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":null,"anchorStatus":"not-recorded"},{"icon":"warning","textEn":"Weakened commitment to 'always' inform users about direct AI interaction.","textIt":"Impegno indebolito a 'sempre' informare gli utenti sull'interazione diretta con l'IA.","deltaScore":1,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":null,"anchorStatus":"not-recorded"},{"icon":"info","textEn":"Renaming of 'Behavioural biometrics' to 'User interactions' without changing data type.","textIt":"Ridenominazione di 'Biometria comportamentale' in 'Interazioni utente' senza cambiare il tipo di dati.","deltaScore":0.5,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":null,"anchorStatus":"not-recorded"}],"keyPoints":[{"textEn":"New clause allows collecting fraud risk data from financial partners, increasing third-party data sharing.","textIt":"Nuova clausola consente la raccolta di dati sul rischio di frode da partner finanziari, aumentando la condivisione con terze parti.","sentiment":"negative"},{"textEn":"The commitment to 'always' inform users about direct AI interaction has been subtly weakened.","textIt":"L'impegno a 'sempre' informare gli utenti sull'interazione diretta con l'IA è stato sottilmente indebolito.","sentiment":"negative"},{"textEn":"The term 'Behavioural biometrics' is now 'User interactions' but the data collected remains the same.","textIt":"Il termine 'Biometria comportamentale' è ora 'Interazioni utente', ma i dati raccolti rimangono gli stessi.","sentiment":"neutral"},{"textEn":"Clarification on biometric data consent, requiring it 'where required by law'.","textIt":"Chiarimento sul consenso ai dati biometrici, richiesto 'ove previsto dalla legge'.","sentiment":"positive"}],"regionImpacts":[{"region":"EU","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"The new data sharing practices and AI transparency changes require careful review for GDPR and future AI Act compliance. Ensuring robust data processing agreements is crucial.","complianceNoteEn":"GDPR Art. 28, AI Act"},{"region":"EU","perspective":"Individual","riskLevel":"High","impactAnalysisEn":"Increased data sharing for fraud prevention and subtle AI transparency changes raise GDPR concerns. Users should be aware of how their data is processed and shared.","complianceNoteEn":"GDPR Art. 6, 9, 13"},{"region":"Global","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Managing cross-border data transfers and diverse regulatory requirements becomes more complex with new data sharing. Robust internal policies and vendor management are essential.","complianceNoteEn":"Cross-border Data Transfer"},{"region":"Global","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"Users worldwide face increased data sharing for fraud and less explicit AI transparency. Understanding local privacy rights and managing consent is important.","complianceNoteEn":"Global Privacy Norms"},{"region":"US","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Compliance with state-specific privacy laws (e.g., CCPA, CPRA, VCDPA) is critical due to expanded data collection and sharing. Data processing agreements with partners need updating.","complianceNoteEn":"State Privacy Laws"},{"region":"US","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"New fraud data collection and behavioral data renaming impact privacy rights under CCPA/CPRA. Users should review their rights regarding data access and deletion.","complianceNoteEn":"CCPA/CPRA"}],"explanationBoundary":"Score reasons and deltaScore values are stored AI-assisted screening outputs. Verified anchors confirm only that the quoted passage occurs in the named snapshot; they do not prove the interpretation."},"governance":{"boundary":"Mappings identify review relevance between recorded PolicyWatcher KPI fields and framework topics. They are not legal interpretations, conformity assessments, certifications or compliance verdicts.","mappings":[{"framework":{"id":"eu-ai-act","name":"Regulation (EU) 2024/1689 (EU AI Act)","shortName":"EU AI Act","referenceUrl":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","referenceVersion":"Official Journal text, 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, automated decisions, data use and human oversight review?","kpiFields":["kpiAiTrainingOptOut","kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAiTrainingOptOut","label":"AI training opt-out","value":"Not Available"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Mentioned"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Partial"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"}]},{"framework":{"id":"iso-42001","name":"ISO/IEC 42001:2023","shortName":"ISO/IEC 42001","referenceUrl":"https://www.iso.org/standard/42001","referenceVersion":"ISO/IEC 42001:2023 overview","reviewQuestion":"Which recorded policy statements may inform an AI management-system review of transparency, risk oversight and independent assurance?","kpiFields":["kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit","kpiRegulatoryCompliance"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Mentioned"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"},{"field":"kpiRegulatoryCompliance","label":"Regulatory compliance","value":"Comprehensive"}]},{"framework":{"id":"nist-ai-rmf","name":"NIST AI Risk Management Framework 1.0","shortName":"NIST AI RMF","referenceUrl":"https://www.nist.gov/itl/ai-risk-management-framework","referenceVersion":"AI RMF 1.0; NIST revision in progress, checked 2026-07-29","reviewQuestion":"Which recorded policy statements may support Govern, Map, Measure or Manage review questions?","kpiFields":["kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness","kpiContentModeration"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Mentioned"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Partial"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiContentModeration","label":"Content moderation","value":"Opaque"}]},{"framework":{"id":"oecd-ai-principles","name":"OECD AI Principles","shortName":"OECD AI Principles","referenceUrl":"https://oecd.ai/en/ai-principles","referenceVersion":"OECD AI Principles, updated 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, fairness, accountability and user agency review?","kpiFields":["kpiConsentMechanism","kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiConsentMechanism","label":"Consent mechanism","value":"Explicit Opt-In"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Mentioned"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"}]}]},"humanReviewQuestions":["Does the original Privacy Policy source still match the recorded public snapshot version 2?","Do the cited source passages support each displayed reason, KPI value and regional note?","Which advisory framework topics require specialist legal, risk or governance review for this use case?","Has a later public change superseded this packet before it is reused in a decision or publication?"],"methodologyUrl":"https://policywatcher.online/methodology/confidence","changeUrl":"https://policywatcher.online/change/2e62256f-eb3a-45c5-95ba-e7b297822af5","boundary":"This packet records PolicyWatcher evidence and AI-assisted screening for one public change. It is not legal advice, a compliance verdict, a certification, or proof that the external source remains unchanged.","contentDigest":"9618db29f2eff6d5c6a7eca0dac9d082ac2dd6d6c303461daf9c22d61b439ef2"}