CCD2 Compliance Checklist for Lenders (2026)

A practical, workstream-by-workstream checklist for CCD2 compliance: scope, data requirements, affordability calculation, documentation, adverse decisions and ongoing obligations — with the 20 November 2026 deadline in mind.

From 20 November 2026, every consumer credit decision in the EU must meet CCD2's creditworthiness and documentation requirements. This checklist covers what lenders, BNPL providers and credit intermediaries need in place — organized by workstream, so risk, compliance and operations teams can divide the work.

1. Scope assessment

Confirm which products fall under CCD2. New in scope: buy now pay later, microloans under €200, interest-free and fee-free credit, and deferred payment offered by platforms. If you previously relied on exemptions, re-check them — most are gone.

2. Data requirements for creditworthiness assessment

You must base assessments on relevant, accurate and proportionate information about income, expenses and other financial circumstances. The data must be current and verifiable. Practical checklist: verified income source (bank transactions, payslips or tax data — not self-declared figures alone); expense and existing-liability visibility; documented disposable-income calculation; proportionality rationale linking assessment depth to credit type and amount.

3. Affordability calculation

The outcome must show the consumer can meet obligations without undermining a reasonable standard of living. That means an explicit affordability calculation — income minus committed expenses and existing debt service — not just a bureau score threshold. Cash-flow analysis from bank account data is the most direct compliant evidence.

4. Documentation and auditability

Every decision needs a documented, explainable basis: which data was used, how it was verified, what the affordability result was, and why the decision followed. If a regulator or court asks why a loan was granted, you need data-driven proof, not analyst recollection. Automated decisioning makes this easier, not harder — if the pipeline logs evidence at every step.

5. Adverse decision handling

Consumers must be informed when a credit application is rejected based on the assessment, including when automated processing was involved, and have the right to request human review. Build the notification and review workflow now.

6. Ongoing obligations

CCD2 pushes lenders toward treating affordability as continuing, not one-off: re-assessment is required when credit amounts increase significantly, and supervisory expectations (EBA guidelines on loan origination and monitoring) extend the logic across the lifecycle. Continuous cash-flow monitoring satisfies both.

7. Vendor and system readiness

Most lenders cannot meet the verified-data and documentation requirements manually at scale. Evaluate whether your stack can: parse bank statements and payslips automatically; compute affordability KPIs and disposable income; produce an audit-ready record per decision; and re-assess on trigger events. Prestatech's pGET document intelligence and pSCORE cash-flow analytics cover this end to end — see our CCD2 compliance hub at prestatech.com/ccd2 for the full regulatory context.

Timeline reminder

Transposition deadline was 20 November 2025; application starts 20 November 2026. Allowing 6–12 months for data integration, model validation and process change, projects starting later than mid-2026 will struggle to be compliant on day one.