This provision requires PayPal pre-approval for all medical device sales and all healthcare services where the provider holds itself out as a healthcare provider, including licensed healthcare services and medical tourism involving cross-border patient services. The category encompasses any health-care services requiring government licensure in either the provider's or the patient's jurisdiction.
This analysis describes what PayPal's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The inclusion of medical tourism within this pre-approval category extends PayPal's oversight requirement to cross-border healthcare payment arrangements, which engage multiple national licensing and regulatory frameworks simultaneously. The standard 'holding itself out as a provider of health-care services' applies regardless of whether the provider is formally licensed, capturing unlicensed health service representations.
Interpretive note: The scope of 'holding itself out as a provider of health-care services' is not precisely defined and may apply differently to wellness, telehealth, and alternative health businesses depending on how PayPal applies this standard in practice.
Under this provision, healthcare providers, medical device sellers, and medical tourism facilitators must obtain PayPal pre-approval before accepting payments. The requirement applies in both the provider's jurisdiction and the patient's jurisdiction, creating a cross-border compliance dimension for international healthcare payment flows.
How other platforms handle this
You may not use Shopify's Services to sell, provide, or promote the following: Products that have been subject to government recalls; Health or medical products that make false claims; Supplements or health products that are not compliant with applicable regulations; Pharmaceuticals that require pre...
You agree not to post, upload, publish, submit or transmit any content that: (i) infringes, misappropriates or violates a third party's patent, copyright, trademark, trade secret, moral rights or other intellectual property rights, or rights of publicity or privacy; (ii) violates, or encourages any ...
You may not use our Services for any illegal purpose or in violation of any laws or regulations. You may not use the Services to send money to sanctioned countries or individuals on government watchlists. You may not use the Services for gambling, illegal drugs, weapons, or any other prohibited acti...
Monitoring
PayPal has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"All items classified as medical devices, and all services or treatment provided by a person or organization holding itself out as a provider of health-care services, including, but not limited to, all health-care services for which government licensure is required in the provider's jurisdiction or in the jurisdiction where services are being provided. This category includes 'Medical Tourism' involving medical services to be provided to a patient outside of that patient's home country.— Excerpt from PayPal's PayPal Acceptable Use Policy
1. REGULATORY LANDSCAPE: FDA regulations govern medical device classification and sales in the US. HIPAA applies to covered healthcare entities processing patient payment information. State medical licensing laws apply to healthcare service providers. For medical tourism, the regulations of both the patient's home country and the service delivery country may apply, creating multi-jurisdictional compliance exposure. 2. GOVERNANCE EXPOSURE: Medium. The 'holding itself out as a provider of health-care services' standard captures businesses that represent healthcare capabilities regardless of formal licensure, which may include wellness, telehealth, and complementary health businesses that do not self-identify as regulated healthcare providers. 3. JURISDICTION FLAGS: EU healthcare providers face GDPR obligations on health data processed in connection with payment flows. US providers must assess HIPAA applicability. Medical tourism operators must assess licensing requirements in both the provider's and patient's jurisdictions, which may include countries with strict health services import/export regulations. 4. CONTRACT AND VENDOR IMPLICATIONS: Healthcare system vendors, medical device distributors, and medical tourism agencies that use PayPal for patient payment collection should confirm pre-approval status. Downstream contracts with healthcare facilities should address PayPal's pre-approval requirement as a payment infrastructure dependency. 5. COMPLIANCE CONSIDERATIONS: Healthcare compliance teams should assess whether their PayPal payment flows involve medical devices or services as defined in this category and initiate pre-approval procedures. The HIPAA intersection with payment data processing should be assessed independently of this AUP requirement.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The inclusion of medical tourism within this pre-approval category extends PayPal's oversight requirement to cross-border healthcare payment arrangements, which engage multiple national licensing and regulatory frameworks simultaneously. The standard 'holding itself out as a provider of health-care services' applies regardless of whether the provider is formally licensed, capturing unlicensed health service representations.
Under this provision, healthcare providers, medical device sellers, and medical tourism facilitators must obtain PayPal pre-approval before accepting payments. The requirement applies in both the provider's jurisdiction and the patient's jurisdiction, creating a cross-border compliance dimension for international healthcare payment flows.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by PayPal.