If you import your phone or email contacts into PayPal, you are certifying that those contacts have given you permission to share their data with PayPal — even though most contacts likely do not know this is happening.
If you sync your contacts with PayPal, the policy places legal responsibility on you for obtaining those contacts' consent — but your contacts likely have no idea their name, phone number, and email are now in PayPal's systems.
How other platforms handle this
Personal data collected by Microsoft may be stored and processed in the United States or any other country where Microsoft or its affiliates, subsidiaries, or service providers maintain facilities. Microsoft complies with applicable legal frameworks relating to the transfer of data across borders, i...
We will share personal information outside of Google if we have a good-faith belief that access, use, preservation, or disclosure of the information is reasonably necessary to: meet any applicable law, regulation, legal process, or enforceable governmental request.
For joint marketing with other financial companies. Yes. No.
This clause shifts legal responsibility for third-party contact data to the PayPal user, while PayPal collects data on people who never agreed to or knew about PayPal's privacy practices.
REGULATORY FRAMEWORK: CCPA/CPRA §1798.100 applies to personal information collected about third parties; collecting contact data about non-users without their knowledge may trigger notice-at-collection obligations for those individuals. GDPR Arts. 13–14 require notice to individuals whose data is collected, including from third-party sources; contact import without notice to the data subject raises compliance concerns. COPPA 16 C.F.R. Part 312 applies if contact lists include children's data. FTC Act Section 5 applies to practices that shift responsibility for third-party data collection to consumers without meaningful disclosure.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.