PayPal · PayPal Privacy Statement

Contact Import and Third-Party Data Certification

Medium severity
Share 𝕏 Share in Share 🔒 PDF
Watch PayPal Get alerts when this provision or policy changes.
Watch — $9.99/mo

Why it matters (compliance & risk perspective)

PayPal collects personal data about people who have never agreed to PayPal's terms of service, and places the legal responsibility for having their permission onto you rather than obtaining that permission itself.

Change history

modified Apr 18, 2026

Provision name changed from 'Contact Information Sharing Certification' to 'Contact Import and Third-Party Data Certification' but excerpt text remains identical.

View full change record →

Consumer impact (what this means for users)

PayPal collects an exceptionally broad range of personal data — including biometrics, inferred creditworthiness, and precise geolocation — and shares it with merchants, credit bureaus, data brokers, fraud agencies, and other financial institutions for purposes including AI training and targeted advertising. Users who have not opted out may have their transaction behavior profiled and shared with partners and merchants for product recommendations and commercial purposes. You can review and adjust your data sharing preferences by visiting paypal.com/us/myaccount/privacy/profiles/search.

How other platforms handle this

Anthropic Medium

Cookies & Similar Technologies. We and our service providers use cookies, scripts, or similar technologies ("Cookies") to manage the Services and to collect information about you and your use of the Services. These technologies help us to recognize you, customize or personalize your experience, mark...

Pinterest Medium

Children under 13 are not allowed to use Pinterest. If you are based in a state or country with an older age requirement, you may only use the Services if you are at or over the age at which you can provide consent to data processing.

Netflix Medium

your Netflix game activity (such as gameplay, game use and interaction information, and progress or saved game information); Netflix viewing and gaming history; search queries on the Netflix service; voice inputs (including transcripts and recordings) when using voice-related features; and other inf...

See all platforms with this clause type →

This clause could change without notice.

Get alerted when PayPal updates this policy — with plain-language summaries and severity ratings.

Watch PayPal Need compliance memos? Professional →
View original clause language
Process information about your contacts. We may use Personal Information in order to make it easy for you to find and connect your contacts, improve payment accuracy and suggest connections with people you may know. By providing us with information about your contacts you certify that you have permission to provide that information to PayPal for the purposes described in this Privacy Statement.

Applicable regulations

EU AI Act
European Union
BIPA
Illinois, USA
CCPA/CPRA
California, USA
COPPA
United States Federal
CAN-SPAM
United States Federal
DMA
European Union
FCRA
United States Federal
GDPR
European Union
GLBA
United States Federal
HIPAA
United States Federal
TCPA
United States Federal
UK GDPR
United Kingdom

Provision details

Document information
Document
PayPal Privacy Statement
Entity
PayPal
Document last updated
April 29, 2026
Tracking information
First tracked
April 18, 2026
Last verified
April 28, 2026
Record ID
CA-P-002270
Document ID
CA-D-00045
Evidence Provenance
Source URL
Wayback Machine
SHA-256
88e15ed1ee29a80c15e1f44d4a7a869e4f68a15049f8669d6949ec87c64d86cb
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: PayPal | Document: PayPal Privacy Statement | Record: CA-P-002270
Captured: 2026-04-18 08:48:00 UTC | SHA-256: 88e15ed1ee29a80c…
URL: https://conductatlas.com/platform/paypal/paypal-privacy-statement/contact-import-and-third-party-data-certification/
Accessed: May 4, 2026
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Don't miss changes to this clause.

PayPal has updated this policy before. Get alerted on the next change.

Watch PayPal

Frequently Asked Questions

What does PayPal's Contact Import and Third-Party Data Certification clause do?

PayPal collects personal data about people who have never agreed to PayPal's terms of service, and places the legal responsibility for having their permission onto you rather than obtaining that permission itself.

Is ConductAtlas affiliated with PayPal?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by PayPal.