Buy Now Pay Later (BNPL) products have exploded across the EU, but regulatory frameworks are catching up. The revised Consumer Credit Directive (CCD II, Directive 2023/2225) brings most BNPL products under full consumer credit regulation for the first time, requiring creditworthiness assessments, standardised disclosures, and withdrawal rights. Before you click 'agree' at checkout, understand what happens when you miss a payment, how your data is used, and what the real cost of 'free' credit actually is.
What is a Consumer Credit and Late Payment Terms?
A Buy Now Pay Later agreement is a short-term credit product that allows consumers to defer payment for a purchase, typically in 3-4 interest-free instalments. Under the revised Consumer Credit Directive (CCD II), most BNPL products are now classified as consumer credit agreements, bringing them under comprehensive EU regulation.
Red flags to watch for
CCD II requires standardised pre-contractual information. Late fees should be prominently displayed, not buried in terms and conditions.
The provider should give reasonable notice and an opportunity to cure before referring the debt to a collection agency or reporting to a credit bureau.
CCD II (Art. 18) requires providers to conduct a creditworthiness assessment before extending credit. A provider that approves everyone without checks may be non-compliant.
Under GDPR, consent for data sharing must be specific and freely given. A BNPL agreement that bundles marketing consent with the credit agreement may violate GDPR.
Under CCD II, consumers have a 14-day right of withdrawal for consumer credit agreements. BNPL providers must inform you of this right.
Some BNPL providers automatically increase your spending limit. This should require affirmative consent and a fresh creditworthiness assessment.
Your legal rights
The revised Consumer Credit Directive (Directive 2023/2225, 'CCD II') extends to BNPL products, requiring: creditworthiness assessments (Art. 18), standardised pre-contractual information via the Standard European Consumer Credit Information form (Art. 10), a 14-day right of withdrawal (Art. 26), and limits on penalties and costs. GDPR (Regulation 2016/679) governs data processing. The Unfair Commercial Practices Directive (2005/29/EC) prohibits misleading omissions in advertising. Member states must transpose CCD II by November 2025, with application from November 2026.
Questions to ask before you sign
- 1What are the late payment fees, and when do they apply?
- 2Is a creditworthiness assessment conducted before approval?
- 3Do I have a 14-day right of withdrawal?
- 4How is my data used, and is marketing consent separate from the credit agreement?
- 5What happens if I miss a payment — is there a grace period?
- 6Will missed payments be reported to credit reference agencies?
- 7Can my credit limit be increased without my consent?
Disclaimer: This guide is for educational purposes only and does not constitute legal advice. Contract law varies by jurisdiction and individual circumstances. Always consult a qualified legal professional before making decisions based on this information.