If you share your contacts list with PayPal, you are certifying that you have permission from each of those people to share their personal information with PayPal.
By importing your contacts into PayPal, you are making a legal certification that you have each contact's permission to share their data — a standard most users cannot genuinely meet, creating potential personal liability.
Cross-platform context
See how other platforms handle Contact Information Certification Requirement and similar clauses.
Compare across platforms →Most users do not obtain explicit permission from their contacts before sharing a contacts list with an app, meaning this clause could expose users to liability if their contacts later object to their data being shared with PayPal.
1. REGULATORY FRAMEWORK: This provision implicates GDPR Art. 6 (lawful basis for processing third-party contact data), GDPR Art. 14 (transparency obligations to data subjects not directly collected from), and CCPA/CPRA §1798.100 (rights of individuals whose data is shared by third parties). COPPA (16 CFR Part 312) applies if any imported contacts are minors. The FTC Act Section 5 applies if the certification mechanism is used to obscure responsibility for unlawful third-party data collection. 2.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.