Skip to content

EU Consumer Credit Directive 2 (CCD2)

Enacted European Union · In force Nov 20, 2026 · next deadline Nov 20, 2026 (in 55 days)

Deadlines

DateWhat happens
Coming up
Nov 20, 2026in 7 weeksNational rules apply
Earlier
Nov 20, 202510 months agoTransposition deadline

Summaries for reference, not legal advice. Check the official text.

What it does

Replaces the 2008 Consumer Credit Directive and extends it to buy-now-pay-later and small loans. Creditworthiness assessments must use relevant, accurate data and may not use special category data or social media data. Where the assessment involves automated processing, consumers get a right to human intervention and an explanation.

Who it applies to
Creditors and credit intermediaries offering consumer credit in the EU, including online lenders and BNPL providers.
Penalties
Set by Member States (Article 44). In coordinated cross-border cases under Regulation (EU) 2017/2394, authorities must be able to impose fines.
Enforced by
National consumer credit and financial conduct authorities.
Official name
Directive (EU) 2023/2225 on credit agreements for consumers
Citation
Directive (EU) 2023/2225
Topics
financial, privacy, ai
Verified 2026-09-25 publications.europa.eu
Research notes

Recitals state creditworthiness data should not include special category data or information obtained from social networks. Member States must notify penalty rules by 2026-11-20.

Related

Questions about EU Consumer Credit Directive 2 (CCD2)
What are the EU Consumer Credit Directive 2 (CCD2) compliance deadlines?
Nov 20, 2025: Transposition deadline. Nov 20, 2026: National rules apply.
When does EU Consumer Credit Directive 2 (CCD2) take effect?
EU Consumer Credit Directive 2 (CCD2) takes effect on Nov 20, 2026. The next milestone is Nov 20, 2026: National rules apply.
Who does EU Consumer Credit Directive 2 (CCD2) apply to?
Creditors and credit intermediaries offering consumer credit in the EU, including online lenders and BNPL providers.
What are the penalties under EU Consumer Credit Directive 2 (CCD2)?
Set by Member States (Article 44). In coordinated cross-border cases under Regulation (EU) 2017/2394, authorities must be able to impose fines.

Rule changes by email

The morning after a new data, privacy or AI law, or a deadline change; nothing in quiet weeks.

Double opt-in. Unsubscribe any time.