PayPal can disclose your financial and personal data to law enforcement or government bodies, and the standard for 'reasonably necessary' gives PayPal significant discretion beyond court-ordered demands.
Consumer impact
PayPal collects an unusually broad range of personal data including biometric identifiers, precise geolocation, inferred income and behavioral profiles, and sensitive financial information, and shares this data with a wide ecosystem of third parties including merchants, credit reporting agencies, debt collectors, and advertisers. Non-account holders who simply transact through PayPal-powered checkouts are also subject to data collection, and their data may later be linked to a PayPal account if one is created. You can opt out of targeted advertising, limit data sharing, and manage your privacy preferences by visiting your PayPal account privacy settings at https://www.paypal.com/us/myaccount/privacy/profiles/search.
Applicable agencies
Federal Trade Commission (ftc)
Oversees unfair or deceptive business practices and can investigate companies that mislead consumers about data collection, sharing, or use.
Who can file: Anyone affected by the company's practices (US or international)
What you need: Your account details, a timeline of relevant events, and a description of the specific issue
What to expect: Complaints inform FTC enforcement priorities and investigations but do not result in individual resolution or compensation
State AGs in California, New York, Texas, and other states can investigate violations of state consumer protection and privacy laws, including CCPA (California), SHIELD Act (New York), and equivalents.
Who can file: Residents of states with comprehensive privacy laws — primarily California, Virginia, Colorado, Connecticut, and Utah
What you need: Evidence of the violation, explanation of how your state rights were affected, and your account or contact information with the company
What to expect: Outcomes vary by state. May result in investigation, enforcement action, or requirement for the company to change practices. No direct individual compensation in most cases.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form