Which regulatory agencies enforce this type of clause?

{'agency': 'CFPB', 'reason': 'The CFPB has jurisdiction over financial data privacy and payment services, including supervision of non-bank payment processors under the Consumer Financial Protection Act.', 'complaint_url': 'https://www.consumerfinance.gov/complaint/'}, {'agency': 'FTC', 'reason': 'The FTC has jurisdiction over unfair or deceptive practices in financial data collection and sharing under FTC Act Section 5 and GLBA privacy rule enforcement for non-bank financial services.', 'complaint_url': 'https://reportfraud.ftc.gov/'}

What is the severity of this clause?

ConductAtlas classifies this Payment and Financial Transaction Data Collection clause as medium severity. Severity reflects the magnitude of rights affected, the breadth of users impacted, and the degree of discretion the platform retains.

Payment and Financial Transaction Data Collection — WhatsApp

Share 𝕏 Share in Share 🔒 PDF

What it is

If you make payments through WhatsApp (available in select markets), WhatsApp collects your payment card details, billing information, and full transaction history.

Consumer impact (what this means for users)

Users of WhatsApp Pay have their full payment card information, billing details, and transaction history collected by WhatsApp, which is subject to Meta's broader data sharing practices and could be used to build detailed financial behavioral profiles.

Cross-platform context

See how other platforms handle Payment and Financial Transaction Data Collection and similar clauses.

Compare across platforms →

Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

Financial transaction data is among the most sensitive personal data and, when combined with Meta's cross-company data sharing, creates potential for financial behavioral profiling across Meta's advertising platforms.

View original clause language

Payment Transactions. If you use our payments services or use our Services to complete purchase transactions, we process additional information about you, including payment account and transaction information. Payment account and transaction information includes information needed to complete the transaction, including payment or credit card information, billing, shipping, and contact details.

Institutional analysis (Compliance & legal intelligence)

1. REGULATORY FRAMEWORK: Payment data collection implicates PCI DSS (Payment Card Industry Data Security Standard) for card data handling, enforced by card networks. In India (WhatsApp Pay's primary market), the Reserve Bank of India (RBI) payment data localisation requirements under the Payment and Settlement Systems Act 2007 apply. In the US, FTC Act Section 5 and potentially Gramm-Leach-Bliley Act (GLBA, 15 U.S.C. §6801) financial privacy provisions may apply. GDPR Art. 9 analysis may apply where transaction data reveals sensitive behavioral patterns (e.g., medical or religious purchases). 2.

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

CFPB

The CFPB has jurisdiction over financial data privacy and payment services, including supervision of non-bank payment processors under the Consumer Financial Protection Act.
File a complaint →
FTC

The FTC has jurisdiction over unfair or deceptive practices in financial data collection and sharing under FTC Act Section 5 and GLBA privacy rule enforcement for non-bank financial services.
File a complaint →

Provision details

Document information

Document

WhatsApp Privacy Policy

Entity

Document last updated

April 29, 2026

Tracking information

First tracked

April 27, 2026

Last verified

April 27, 2026

Record ID

CA-P-003493

Document ID

CA-D-00176

Evidence Provenance

Source URL

https://www.whatsapp.com/legal/privacy-policy

Wayback Machine

View archived versions →

SHA-256

da3747c89494f5bc1ac42196c98a312f3a8f2653a848eb7d232db53b79597ebe

Verified

✓ Snapshot stored ✓ Change verified

How to Cite

ConductAtlas Policy Archive
Entity: WhatsApp | Document: WhatsApp Privacy Policy | Record: CA-P-003493
Captured: 2026-04-27 13:47:46 UTC | SHA-256: da3747c89494f5bc…
URL: https://conductatlas.com/platform/whatsapp/whatsapp-privacy-policy/payment-and-financial-transaction-data-collection/
Accessed: May 2, 2026

Classification

Severity

Medium

Payment and Financial Transaction Data Collection