PayPal · PayPal Privacy Statement

Data Sharing with Partners, Merchants, and Data Brokers

High severity
Share 𝕏 Share in Share

What it is

We may disclose Personal Information with the following categories of service providers... Third parties, including service providers, Partners and Merchants, payment partners, such as payment networks and processors, credit reporting agencies and public and private credit databases ("CRAs"), government entities, data brokers, and financial institutions... Please note that once Personal Information is shared with Partners and Merchants (or their service providers) involved in a transaction, the handling of your Personal Information by the Partners and Merchants (or their service provider) is subject to the Partners' and Merchants' own privacy policies and procedures.

Why it matters

Once your data is shared with merchants, data brokers, and their service providers, you lose the protections of PayPal's privacy policy, creating significant risk of secondary use, re-sale, and data breaches by parties you have no direct relationship with.

Consumer impact

PayPal collects an exceptionally broad range of personal data — including biometrics, precise geolocation, inferred creditworthiness, and full financial histories — and shares it with partners, merchants, credit reporting agencies, data brokers, and members of the PayPal corporate group. Automated decision-making, including AI-driven risk and fraud assessments, can directly affect your account status, credit access, and transaction approvals without transparent human review. You can review and limit certain data uses by visiting your PayPal account privacy settings at paypal.com/us/myaccount/privacy.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Log into PayPal, go to Settings > Privacy, and submit a data sharing opt-out or deletion request. California residents can specifically opt out of data sharing for cross-context behavioral advertising under CPRA.

Applicable agencies

  • CFPB
    The CFPB enforces GLBA Privacy Rule opt-out obligations for non-affiliated third-party financial data sharing and has targeted data broker ecosystems in financial services.
    File a complaint →
  • FTC
    The FTC enforces CCPA-analogous federal privacy obligations and has authority over deceptive disclosures about data broker sharing under FTC Act Section 5.
    File a complaint →

Provision details

Document information
Document
PayPal Privacy Statement
Entity
PayPal
Document last updated
March 24, 2026
Tracking information
First tracked
March 6, 2026
Last verified
April 10, 2026
Record ID
CA-P-002674
Document ID
CA-D-00045
Evidence Provenance
Source URL
Wayback Machine
SHA-256
a5efa287f0b43a6a87f7dfc939ccb3c8edfb0ea67f476b2afeddf66fffa27690
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: PayPal | Document: PayPal Privacy Statement | Record: CA-P-002674
Captured: 2026-03-06 20:34:43 UTC | SHA-256: a5efa287f0b43a6a…
URL: https://conductatlas.com/platform/paypal/paypal-privacy-statement/data-sharing-with-partners-merchants-and-data-brokers/
Accessed: April 17, 2026
Classification
Severity
High
Categories

Other provisions in this document

Related Analysis