The breadth of sensitive data collected creates a high-value target for data breaches and identity theft, and consumers should understand the full scope of what PayPal holds about them.
Consumer impact
PayPal collects an unusually broad range of personal data including biometric identifiers, precise geolocation, inferred income and behavioral profiles, and sensitive financial information, and shares this data with a wide ecosystem of third parties including merchants, credit reporting agencies, debt collectors, and advertisers. Non-account holders who simply transact through PayPal-powered checkouts are also subject to data collection, and their data may later be linked to a PayPal account if one is created. You can opt out of targeted advertising, limit data sharing, and manage your privacy preferences by visiting your PayPal account privacy settings at https://www.paypal.com/us/myaccount/privacy/profiles/search.
What you can do
⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
Delete Your Data
Submit a data deletion request through the privacy rights portal linked in PayPal's Privacy Statement, specifying the categories of sensitive personal information you wish deleted, and complete identity verification as required.
Applicable agencies
Consumer Financial Protection Bureau (cfpb)
Regulates consumer financial products and services. Can investigate companies for unfair, deceptive, or abusive financial practices including improper fees, billing errors, and data misuse.
Who can file: Anyone who has used a consumer financial product or service in the US
What you need: Account number or details, dates of transactions or events, description of the issue, and any supporting documents
What to expect: The company must respond within 15 days. The CFPB forwards your complaint and may use it in enforcement actions. Individual compensation is possible in some cases.