CCD2: The EU Consumer Credit Directive 2, Explained for Lenders
CCD2 (Directive (EU) 2023/2225) is the second EU Consumer Credit Directive. It requires lenders to base every consumer credit decision on a thorough, documented creditworthiness assessment using verified financial data — and it extends these rules to BNPL, microloans and interest-free credit for the first time. Member States had to transpose it by 20 November 2025; lenders must comply from 20 November 2026.
The second EU Consumer Credit Directive (CCD2) – Directive (EU) 2023/2225 – fundamentally changes the regulatory framework for consumer credit in Europe. Adopted on October 18, 2023, and published in the EU Official Journal on October 30, 2023[1], it will replace the previous directive from 2008. Member States must transpose CCD2 into national law by November 20, 2025, at the latest; the new rules will apply from November 20, 2026[2]. The aim of the reform is to adapt the credit market to digital developments and significantly strengthen consumer protection[2]. New, previously unregulated forms of credit – such as microloans, interest-free or fee-free purchases, and buy now, pay later (BNPL) – will now be covered[3][4]. The rules on transparency, advertising, and creditworthiness checks will be tightened to ensure responsible lending.
In Germany, the directive is being implemented through amendments to, among other things, the Civil Code (BGB), the Introductory Act to the Civil Code (EGBGB), the Banking Act (KWG), and the Trade Regulation Act (GewO)[5]. The Federal Ministry of Justice presented a draft bill in June 2025, followed by a government draft in September 2025[6]. The latter incorporates most of the proposals and adds detailed provisions, e.g., on supervision[6]. The competent supervisory authorities will be, in particular, the Federal Financial Supervisory Authority (BaFin) for credit institutions and – for credit intermediaries and certain financing providers – the trade offices due to new licensing requirements (GewO §34c)[7][8]. Many of the basic principles of CCD2 are based on the EBA guidelines on lending and monitoring (EBA/GL/2020/06), which have been incorporated into supervisory law in Germany since 2021 via MaRisk. For lenders, the reform represents a paradigm shift: it is no longer sufficient to superficially check the customer's solvency – a comprehensible, objective creditworthiness assessment carried out in the interest of the consumer is mandatory. All relevant information must be taken into account and the decision documented.
1.1 Creditworthiness assessment in the consumer's interest
Every credit decision must be based on relevant, accurate, and proportionate information that is appropriate to the nature, amount, and risk of the credit[12]. In particular, CCD2 requires a comprehensive assessment of the consumer's financial circumstances. The German implementing provisions (Sections 505a and 505b BGB, as amended) require three key categories of data to be included in the assessment[13]:
| Type of information | Examples | Purpose |
|---|---|---|
| Income and financial capacity | Salary, wage replacement benefits, pensions, or other regular income | Assessment of repayment ability. |
| Expenses and financial obligations | Rent, utilities, ongoing loan payments, maintenance obligations | Determination of disposable income. |
| Credit history and liabilities | Credit agencies (SCHUFA, Creditreform), public debtor registers | Assessment of payment behavior and any risks of over-indebtedness. |
CCD2 timeline: the key dates
30 October 2023 — CCD2 published in the EU Official Journal. 20 November 2025 — deadline for Member States to transpose the directive into national law. 20 November 2026 — the rules apply: every consumer credit decision must meet the new creditworthiness and documentation requirements. Lenders that wait for national guidance to settle typically need 6–12 months to adapt data, processes and audit trails — which makes 2026 the implementation year, not the preparation year.
How Prestatech automates CCD2 compliance
Prestatech's cash-flow analytics (pSCORE) and document intelligence (pGET) produce exactly what CCD2 demands: verified income and expense data from bank statements and account transactions, an automated affordability calculation down to disposable income, and a fully documented, explainable assessment for every decision — at origination and throughout the loan lifecycle.
Frequently asked questions about CCD2
What is CCD2?
CCD2 (Directive (EU) 2023/2225) is the second EU Consumer Credit Directive. It replaces the 2008 directive, extends consumer-credit rules to BNPL, microloans and interest-free credit, and requires lenders to perform a thorough, documented creditworthiness assessment based on verified financial data such as income, expenses and bank transaction information.
When does CCD2 take effect?
Member States had to transpose CCD2 into national law by November 20, 2025. The rules apply to lenders from November 20, 2026.
Who is affected by CCD2?
Banks, consumer lenders, BNPL providers, credit intermediaries and platforms offering deferred payment to EU consumers. Previously unregulated products — microloans, interest-free or fee-free credit, and buy now, pay later — are now in scope.
What does CCD2 require for creditworthiness assessments?
Assessments must be based on relevant, accurate and proportionate information about income, expenses and other financial circumstances — verified, current and documented. The assessment must be in the consumer's interest and demonstrate that repayments are sustainable.
Does CCD2 require cash-flow data?
CCD2 requires verified financial data covering income and expenses. Bank transaction (cash-flow) data is the most direct way to evidence both, which is why most lenders are operationalizing CCD2 affordability checks with automated cash-flow analysis.
How can lenders automate CCD2 compliance?
By combining document intelligence (automated parsing of bank statements and payslips) with cash-flow analytics that compute affordability and disposable income automatically, producing an auditable, explainable assessment for every decision.
Further reading on CCD2
- CCD2 Explained: What Risk and Credit Teams Need to Prepare for Now
- How CCD2 Turns Cash Flow Into a Compliance Requirement
- CCD2 Affordability: From One-Time Check to Continuous Obligation
- Why Manual Affordability Checks Don't Scale Under CCD2
- CCD2 Income Verification Requirements
- CCD2 Auditability: What Regulators Will Ask
- CCD2 and Continuous Monitoring After Approval
- The CCD2 Directive and the Future of Consumer Credit