Compliance/GDPR Art. 22/Fintech & Payments
GDPR Art. 22 compliance for Fintech & Payments
Credit denials, account closures, and fraud-flagged transaction declines produce legal effects. Art. 22 applies; meaningful human intervention required unless explicit consent or contractual necessity.
What applies
Articles + provisions of Regulation (EU) 2016/679 — GDPR, Article 22 (automated decisions) most directly engaged by Fintech & Payments deployments:
- Art. 22
- Recital 71
- WP251 (EDPB Guidelines)
What this looks like in Fintech & Payments
Credit denials, account closures, and fraud-flagged transaction declines produce legal effects. Art. 22 applies; meaningful human intervention required unless explicit consent or contractual necessity.
Flagship exampleSchufa (CJEU C-634/21) confirmed: a scoring-style decision is itself an Art. 22 decision when downstream actors draw strongly on it.
Where Promethean's evidence layer fits
The substrate emits specific evidence kinds that map to GDPR Art. 22 obligations. Most directly relevant for Fintech & Payments:
For the full sector view including LLM-feature catalogue, tier recommendation, and reviewer-gate examples, see the Fintech & Payments sector page.
Adjacent cells
Same regulation, other sectors
Other regulations for Fintech & Payments