PolicyWatcherPublic evidence laboratory

Public Evidence Packet

PayPal - Privacy Statement

Privacy Statement

6d94c250-62ab-4f8b-88b6-03573281433f
Screening date
01 Aug 2026, 04:36 UTC
Jurisdiction
EU
Risk screening
High · 7/10
Score trace
0 points; unchanged

This packet records PolicyWatcher evidence and AI-assisted screening for one public change. It is not legal advice, a compliance verdict, a certification, or proof that the external source remains unchanged.

  1. 01Source evidence
  2. 02Explainability
  3. 03Governance Relevance
  4. 04Report Output
01

Dataset QA · sanitized public view

Source evidence

Publication gate
Published
Retrieval state
Recorded retrieval available
Latest retrieval
04 Nov 2026, 18:40 UTC
Sanitized channel
direct
Data status
Available
Public snapshot evidence
Available

Public snapshot fingerprints

Previous · version 3320239c1eb5644bef52632ccf2177de89fd5c2d82de78bab34f0b8c193a41ec7Captured 10 Jul 2026, 01:46 UTC
Current · version 4168f01646ad727bfb22632a07b38d4213b1e7ace135386ba18deefa502a85984Captured 01 Aug 2026, 04:36 UTC

Source confidence describes recorded retrieval and publication state. It does not rate the provider policy or certify source authenticity.

02

Source-anchored screening trace

Explainability

PayPal collects extensive personal and sensitive data, uses it for AI training and automated decisions, and shares it broadly with third parties.

  1. Reason 1+3 score contribution

    Extensive collection of sensitive and biometric data.

    Related KPI
    Data collection
    Source side
    new snapshot
    Verified exact source passage

    “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience”

  2. Reason 2+2 score contribution

    Broad sharing with third parties, including data brokers.

    Related KPI
    Third-party sharing
    Source side
    new snapshot
    Verified exact source passage

    “Third parties, including service providers, Partners and Merchants, payment partners, such as payment networks and processors, credit reporting agencies and public and private credit databases ("CRAs"), government entities, data brokers, an”

  3. Reason 3+2 score contribution

    Personal data used for AI training and automated decisions.

    Related KPI
    AI training opt-out
    Source side
    new snapshot
    Verified exact source passage

    “AI and Automated Decision Making. We may use Personal Information to train our artificial intelligence (AI) models that power our Services and help us deliver more secure, efficient, and personalized services.”

Score reasons and deltaScore values are stored AI-assisted screening outputs. Verified anchors confirm only that the quoted passage occurs in the named snapshot; they do not prove the interpretation.

03

Advisory review map

Governance Relevance

EU AI Act

Official Journal text, 2024

Mapped evidence

Which recorded policy statements may be relevant to transparency, automated decisions, data use and human oversight review?

AI bias and fairness
Absent
Framework source

ISO/IEC 42001

ISO/IEC 42001:2023 overview

Mapped evidence

Which recorded policy statements may inform an AI management-system review of transparency, risk oversight and independent assurance?

AI bias and fairness
Absent
Independent audit
Absent
Regulatory compliance
Partial
Framework source

NIST AI RMF

AI RMF 1.0; NIST revision in progress, checked 2026-07-29

Mapped evidence

Which recorded policy statements may support Govern, Map, Measure or Manage review questions?

AI bias and fairness
Absent
Framework source

OECD AI Principles

OECD AI Principles, updated 2024

Mapped evidence

Which recorded policy statements may be relevant to transparency, fairness, accountability and user agency review?

Consent mechanism
Opt-Out
AI bias and fairness
Absent
Independent audit
Absent
Framework source

Mappings identify review relevance between recorded PolicyWatcher KPI fields and framework topics. They are not legal interpretations, conformity assessments, certifications or compliance verdicts.

04

Exact change-bound files

Report Output

Both files are generated from this exact change ID.

Download exact-change PDF Download exact-change JSON
Packet content digest · SHA-256bfc64c98da44fc70d958a7e1a4a56548c023def809ea59ec2e452bb0e08a8584

Questions before reuse

  1. Does the original Privacy Statement source still match the recorded public snapshot version 4?
  2. Do the cited source passages support each displayed reason, KPI value and regional note?
  3. Which advisory framework topics require specialist legal, risk or governance review for this use case?
  4. Has a later public change superseded this packet before it is reused in a decision or publication?