You are applying for a car loan or a mortgage. A few days later, another organization seems to already know your financial situation. This is not a coincidence: credit organizations have legal channels to exchange your financial information, and these exchanges have strengthened since 2026.
Central Files of the Banque de France: the Foundation of Information Sharing Between Credit Organizations
Before even examining your file in detail, every lender starts by querying centralized files. The most well-known is the FICP (file of incidents of repayment of loans to individuals). Managed by the Banque de France, it lists borrowers who have experienced payment delays or filed for over-indebtedness.
See also : How to Grow Your Business in the Female Beauty and Restaurant Industry
Since June 1, 2026, consulting the FICP has become systematic for any consumer credit, regardless of the amount. Previously, some micro-loans could escape this verification. This is no longer the case.
Another file, the FCC (central file of checks), reports banking bans related to bounced checks. And the FICOBA file, maintained by the tax administration, lists all bank accounts opened in France. These databases are not accessible to everyone: only authorized institutions can query them, within a strict framework. To better understand the communication mechanisms between lenders, you can consult the Monetyk website which details these circuits.
See also : How to Successfully Complete Your Home Extension Project in Yvelines: Tips and Tricks
Bank Statements and Scoring: What Lenders Are Analyzing Since 2026
Have you noticed that you are asked for your bank statements when applying for a loan? This practice has become more mandatory.
Since June 1, 2026, credit organizations must analyze at least the last three actual bank statements of the applicant. The goal: to verify the consistency between declared income and actual flows in the account. A bank statement reveals much more than a payslip. It shows recurring expenses, overdrafts, online gambling, multiple subscriptions.
This data then feeds into a credit score. Each organization uses its own scoring model, often enhanced by artificial intelligence. The CNIL has also published specific recommendations on automated scoring in credit granting, requiring that the applicant be informed of the criteria that led to the refusal of their application.
The Regulation of AI Scoring
Automated evaluation models must comply with the GDPR. This means you have the right not to be subject to a decision based solely on automated processing. In practice, a human advisor must be able to intervene in the final decision, especially in the case of a refusal.
Since 2025, financial institutions that use AI systems for scoring must also document how these tools work and justify their logic to regulators.
Portability of Bank Data and Open Finance: A Right That Changes the Game
The portability of bank data now goes beyond the simple framework of the GDPR. The European regulatory developments of 2025 have structured a right to transfer account data to other providers. In practice, you can authorize a new credit organization to access your banking information held by your current bank.
This mechanism is based on open finance. The legal basis is not consent in the sense of the GDPR, but the execution of the contract. The distinction is technical, but its consequences are real: the transfer of data cannot be blocked by your bank if you have requested it as part of a credit application.
What This Changes for Borrowers
With open finance, a broker or an alternative credit organization can access a consolidated view of your finances, without you having to manually gather your documents. This speeds up the processing of applications and makes it easier to compare offers.
In return, more actors can consult your data. Protection relies on three pillars:
- The approval of the requesting organization, issued by the ACPR (Prudential Control and Resolution Authority)
- The encryption of data exchanges between banking systems
- The right to revoke access at any time, directly with your bank or the aggregator
File of Suspicious IBANs: A New Channel for Sharing Between Institutions
A recent system illustrates the expansion of financial information sharing between institutions. In 2026, a centralized file of suspicious IBANs was established to combat banking fraud. This file allows banks and credit organizations to report and consult banking details associated with fraudulent operations.
This system breaks an old barrier: until now, a bank that was a victim of fraud had no simple way to alert other institutions about a compromised IBAN. Now, information circulates between sector players within a defined regulatory framework.
Banking Secrecy and Limits of Financial Data Sharing
All these exchanges do not mean that your data circulates freely. Banking secrecy remains a fundamental principle of French law. A credit institution cannot communicate your information to a third party without a legal basis or your explicit consent.
Exceptions are regulated:
- The legal obligation to consult the FICP and the FCC
- Judicial or tax requisitions
- The portability of data requested by the client themselves
- Fraud reports within the file of suspicious IBANs
The CNIL has strengthened its recommendations so that past payment incidents do not indefinitely penalize borrowers. Data recorded in the FICP is kept for a limited time, and a credit organization cannot refuse an application solely based on an old and regularized incident.
The landscape of financial information sharing between credit organizations has thus been significantly structured. Between central files, automated scoring, open finance, and the file of suspicious IBANs, every borrower has an interest in knowing precisely what data is circulating and exercising their rights of access and rectification with both their bank and the Banque de France.