Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The document authorizes PayPal to use automated profiling to assess creditworthiness, fraud risk, money laundering indicators, and identity consistency, and to refuse, terminate, or restrict services based on those assessments without human involvement or limited human involvement depending on applicable law.
This analysis describes what PayPal's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that service access, continuation, and restrictions may result from automated assessments without guaranteed human review in all jurisdictions; for US users, the document asserts these practices are either exempt or do not trigger opt-out rights under applicable US privacy laws, while EEA and UK users retain rights to seek human review of automated decisions.
⚠ Automated assessments will proceed as described, and service restrictions or refusals based on those assessments may apply without further notice as stated in the terms
Cross-platform context
See how other platforms handle Automated Decision Making for Credit, Fraud, and Service Access and similar clauses.
Compare across platforms →Monitoring
PayPal has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"PayPal uses Automated Decision Making technology to make assessments or decisions, including related to risk, fraud and creditworthiness, where permitted and in accordance with applicable law. Our Automated Decision Making technology may use profiling techniques to evaluate personal aspects about you, including to analyze or predict your economic situation, reliability and/or behavior. This enables us to assess, for example, whether you display traits indicating possible credit or financial risk, money laundering or fraudulent activity, that are inconsistent with any submissions you have made to us, or that suggest you have hidden your real identity. In making an Automated Decision, PayPal may process Users' Personal Information. If we determine that you pose a credit, fraud, money laundering or other risk, we may refuse to provide new services to you, stop providing services you currently use, or place limits or restrictions on the services you use.Excerpt from PayPal's Privacy Statement
1. REGULATORY LANDSCAPE: This provision directly engages GDPR Article 22, which establishes rights not to be subject to solely automated decisions producing legal or similarly significant effects, and requires meaningful human review mechanisms for EEA users. The document acknowledges this right for EEA and UK users. For US users, the document asserts exemption or non-applicability under US privacy laws; this characterization may require ongoing evaluation as Colorado, Virginia, Connecticut, and other states have enacted or are enacting automated decision rights. The CFPB has authority over automated credit decision practices under the Equal Credit Opportunity Act and Fair Credit Reporting Act. 2. GOVERNANCE EXPOSURE: High. Automated decisions resulting in service termination, service refusal, or account restrictions have direct financial impact on consumers and merchants. The use of profiling to predict economic situation, reliability, and behavior as inputs to these decisions creates model governance, explainability, and bias-monitoring obligations under GDPR and emerging US frameworks. Documentation of model logic, accuracy, and fairness is a material compliance consideration. 3. JURISDICTION FLAGS: EEA and UK users have explicit rights to seek human review of automated decisions with legal or similarly significant effects. Illinois, New York, and other states with emerging automated decision regulations may create heightened exposure. The CFPB's oversight of automated credit and lending decisions is relevant for PayPal's credit-related automated assessments, including PayPal Credit. The Fair Credit Reporting Act may apply where automated assessments draw on credit bureau data. 4. CONTRACT AND VENDOR IMPLICATIONS: The document states PayPal has safety mechanisms including ongoing reviews of decision models and random sampling. Legal and compliance teams should verify that model governance documentation satisfies GDPR's accountability requirements and that the described review mechanisms are operationally implemented and auditable. 5. COMPLIANCE CONSIDERATIONS: Compliance teams should maintain records of automated decision systems, their inputs, and their outputs as required under GDPR and evaluate whether the safety mechanisms described in the document satisfy the explainability and human review standards applicable in each jurisdiction. Adverse action notice requirements under the Equal Credit Opportunity Act and Fair Credit Reporting Act should be evaluated for credit-related automated decisions affecting US consumers.
Regulatory citations, enforcement risk, and due diligence action items.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
This provision establishes that service access, continuation, and restrictions may result from automated assessments without guaranteed human review in all jurisdictions; for US users, the document asserts these practices are either exempt or do not trigger opt-out rights under applicable US privacy laws, while EEA and UK users retain rights to seek human review of automated decisions.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by PayPal.