If you sell on eBay, you must provide government-issued ID, social security number, date of birth, selfie photos, and bank account details as part of identity verification for payment services.
Sellers are required to submit highly sensitive personal and financial documents to eBay, creating significant risk exposure if this data is breached, misused, or shared with unauthorized parties.
Collection of government IDs, SSNs, and biometric-equivalent data (selfie photos) implicates GLBA financial privacy requirements, state biometric privacy laws (e.g., BIPA in Illinois), and GDPR Article 9 special category data provisions. Payment service data processing also engages PCI-DSS and relevant financial regulatory requirements for payment processors.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
eBay collects an extensive range of personal data including financial details, government IDs, biometric data (for sellers), browsing behavior, and location data, and shares this information with advertising partners, payment processors, and other third parties for targeted marketing and fraud detection. Consumers' messages sent through eBay's platform may be filtered and scanned, and their data may be transferred internationally across eBay's global affiliates. You can manage your communication preferences, advertising settings, and submit data rights requests through eBay's Privacy Center at https://www.ebayinc.com/company/privacy-center/privacy-contact/.