Under the Gramm-Leach-Bliley Act notice, PayPal states it shares personal information with affiliates for creditworthiness purposes, with affiliates for marketing, and with non-affiliates for marketing, and that users may limit these three categories of sharing via account settings or by calling customer service. Other categories of sharing including everyday business purposes and joint marketing are stated to be non-limitable.
This analysis describes what PayPal's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the GLBA notice framework disclosing which sharing categories users may and may not limit, and specifies the mechanisms available to exercise those limitations. Existing customers with accounts opened before November 27, 2024 are stated to have sharing limited to data collected after that date unless they affirmatively consent to earlier data being shared.
⚠ PayPal will share personal information with affiliates for creditworthiness and marketing purposes and with non-affiliates for marketing purposes as stated in the terms, unless the opt-out is exercised
Cross-platform context
See how other platforms handle GLBA Notice: Non-Affiliate Marketing Sharing with Opt-Out and similar clauses.
Compare across platforms →"Reasons we can share your personal information Does PayPal share? Can you limit this sharing? For our affiliates' everyday business purposes – information about your creditworthiness Yes Yes For our affiliates to market to you Yes Yes For our nonaffiliates to market to you Yes Yes To limit our sharing You may limit certain sharing by logging into you PayPal Account and editing your preferences in the Data and Privacy setting. Call 1-888-221-1161 to limit all sharing where permitted.Excerpt from PayPal's Privacy Statement
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes the GLBA notice framework disclosing which sharing categories users may and may not limit, and specifies the mechanisms available to exercise those limitations. Existing customers with accounts opened before November 27, 2024 are stated to have sharing limited to data collected after that date unless they affirmatively consent to earlier data being shared.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by PayPal.