YSK: PayPal (USA) is updating their “Privacy Statement” policy to automatically share data about you with retailers. Policy takes effect 2024-11-27. Requires opt out by user to deny sharing
Amendments to the PayPal Privacy Statement
Effective November 27, 2024:
We are updating our Privacy Statement to explain how, starting early Summer 2025, we will share information to help improve your shopping experience and make it more personalized for you. The key update to the Privacy Statement explains how we will share information with merchants to personalize your shopping experience and recommend our services to you. Personal information we disclose includes, for example, products, preferences, sizes, and styles we think you’ll like. Information gathered about you after the effective date of our updated Privacy Statement, November 27, 2024, will be shared with participating stores where you shop, unless you live in California, North Dakota, or Vermont. For PayPal customers in California, North Dakota, or Vermont, we’ll only share your information with those merchants if you tell us to do so. No matter where you live, you’ll always be able to exercise your right to opt out of this data sharing by updating your preference settings in your account under “Data and Privacy.”
edit: update title to reflect this is for PayPal USA users
Just logged in, just found it, just opted out. Thanks for the heads-up OP.
But fucking fuck. Can we put a stop to this? Legally? We could call it sometime like... The National Opt-out Policy Elimination (NOPE) Act or something.
That thing which makes Meta and Apple so scared they do not release their new products in AI anymore in the EU to pressure us to loosen up the laws. That has already been costly to these companies.
That prevents Paypal from doing this change in the EU.
Well, you can also file a formal complaint with your regional data protection officer. Usually, this is resolved outside of court, though, so it doesn't necessarily prove that the behavior was illegal (although a judge might take the data protection officer's opinion as expert input for future trials anyways).
Yeah, no. You can choose to say no.
A privacy banner has to give you a single click option to decline the use of your personal data and if you don't get that option, they're not complying to GDPR.
I systematically file complaints against unlawful privacy banners and with every popup that gets corrected I made the world a more privacy friendly place. It ain't much but it's an honest job.
Most things should be. Hell, one of Google's biggest public failures was building an opt-out social media network that let all sorts of people see who you've emailed lately.
Thank you. I'm honestly surprised this link is shareable and not some application generated garbage string.
I'm not sure how you found this:
'No matter where you live, you’ll always be able to exercise your right to opt out of this data sharing by updating your preference settings in your account under “Data and Privacy.”'