CA-C-000633
Glassdoor — Glassdoor Privacy Policy
Entity
Date detected
April 23, 2026
Effective date
April 22, 2026
Severity
Medium
Direction
Positive
Affected users
eu users uk users swiss users all users
Taxonomy
Cross border transfer change
Changes
+9 sentences added · −1 sentence removed · 4 sentences modified
Share 𝕏 Share in Share 🔒 PDF
🔔 Get alerted when Glassdoor changes their policies.
Watcher — $9.99/mo Professional →

What Changed

Glassdoor updated its Privacy Policy on April 23, 2026, adding several new rights for EU, UK, and Swiss users under the Data Privacy Framework (DPF), including the right to access, correct, amend, or delete personal information held by Glassdoor in the United States. The update also clarifies that users can opt out (or opt in for sensitive data) before their data is shared with third parties for new purposes. A minor typo fix ('orr' to 'or') was also included. These changes strengthen privacy protections for international users by explicitly spelling out their data rights.

Consumer Impact (what this means for users)

EU, UK, and Swiss users now have explicitly stated rights to access, correct, amend, or delete their personal information held by Glassdoor in the United States under the Data Privacy Framework. Glassdoor also committed to providing opt-out (or opt-in for sensitive data) choices before sharing your data with third parties for purposes beyond the original collection. You can exercise these rights by following the instructions in the 'Controlling Your Personal Data' section of Glassdoor's Privacy Policy.

Obligation Changes (what shifted)

6
New obligations
1
Expanded
1
Protection removed
Consumers Added

You can ask Glassdoor whether it has your personal data stored in the US and it must tell you.

Consumers Added

You can request a copy of the personal data Glassdoor holds about you.

+ 5 more obligation changes. Full breakdown available with Watcher.

Unlock — $9.99/mo →

Applicable regulations

CCPA/CPRA
California, USA
CFAA
United States Federal
CAN-SPAM
United States Federal
GDPR
European Union

Why It Matters (compliance & risk perspective)

EU, UK, and Swiss Glassdoor users now have explicitly codified rights to access, fix, or delete their personal data held in the US, which strengthens their practical ability to exercise data protection rights across borders. The removal of the TrustArc escalation pathway, however, may make it harder to resolve complaints if Glassdoor does not address them directly.

Key Clauses Affected

Data Privacy Framework Individual Rights

New explicit rights added for EU, UK, and Swiss individuals to access, correct, amend, or delete personal data held by Glassdoor in the United States.

Third-Party Data Sharing Opt-Out

Glassdoor now commits to providing opt-out (or opt-in for sensitive data) choices before sharing user data with third parties for new or unauthorized purposes.

TrustArc Dispute Resolution Reference

The explicit TrustArc third-party dispute resolution contact link was removed, potentially affecting how individuals escalate unresolved DPF privacy complaints.

Full clause-by-clause analysis available with Watcher.

Evidence Verification

✓ Verified
Previous Version
7cc7781cef2b07d739be879358fe3f776d51210091122f66e0f30014ef6b5976
April 19, 2026 06:12 UTC
✓ Verified
Current Version
fd0586601d50c704dfba93ff57c2cb593aca0dac95c8411380d9f3e6e4849739
April 23, 2026 06:14 UTC
✓ Verified
Change Detected
April 23, 2026 06:14 UTC
✓ Verified
Source Document
https://www.glassdoor.com/about/privacy.htm
How to Cite
ConductAtlas Policy Archive
Entity: Glassdoor | Document: Glassdoor Privacy Policy | Record: CA-C-000633
Captured: 2026-04-23 06:14:31 UTC
URL: https://conductatlas.com/change/2026-04-23-glassdoor-glassdoor-privacy-policy-633/
Accessed: May 2, 2026

Unlock the full analysis

Institutional analysis Clause breakdown Document redline Citation export
Watcher — $9.99/mo Professional — $149/mo

14-day free trial available.

Institutional Analysis (Compliance & legal intelligence)

Assessment

Glassdoor has updated its Privacy Policy effective April 23, 2026 to add explicit DPF (Data Privacy Framework) Principles-compliant language covering EU, UK, and Swiss individuals' rights to access, correct, amend, and delete personal data held in the US, along with opt-out/opt-in obligations for third-party data sharing. This directly implicates the EU-U.S. DPF, UK Extension, and Swiss-U.S. DPF obligations. The removal of TrustArc dispute resolution contact language and replacement with substantive individual rights language may affect how complaints are channeled. Compliance teams should verify that operational procedures (access requests, deletion workflows, opt-out mechanisms) align with the updated policy commitments. Action is required to confirm internal processes match these new public-facing commitments.

Regulatory Exposure

1. EU-U.S. Data Privacy Framework (DPF) Principles — Notice, Choice, Access, and Recourse/Enforcement Principles: The new language directly mirrors DPF obligations for data transferred from the EU to the US.

🔒

Compliance intelligence locked

Obligation analysis, escalation trigger, board language, and recommended action.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations + obligations. Professional: full compliance memo.

ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-000633.

Full Changes

See the full side-by-side comparison of every sentence added, removed, and modified.

🔒 Unlock full diff — Watcher $9.99/mo

Document Context

Document
Glassdoor Privacy Policy
Entity
Glassdoor
Captured
April 23, 2026
Source URL
https://www.glassdoor.com/about/privacy.htm
Related Analysis
Privacy · April 16, 2026
23andMe Is Bankrupt. What Happens to Your DNA Now?

Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do…

Stay ahead of policy changes

We monitor 200+ platforms and archive every change — verified and timestamped.