ADP Privacy Statement

This document sets out how ADP handles personal data it processes on behalf of employers and individuals: it can only use your data as your employer or you permit, must keep it only as long as necessary, and must notify you of a security breach if you are at high risk of harm. ADP states it has not sold your personal data in the last 12 months, but it does share identifiers including your name, email address, IP address, and government-issued identifiers with ad networks. If your employer's service agreement with ADP ends, ADP must return or securely destroy your data.

This Privacy Statement establishes ADP's substantive obligations regarding the collection, processing, sharing, retention, and security of Personal Data and Sensitive Personal Data. ADP's authority to collect and process personal data is limited to instructions or permissions from the client (employer or prospective employer) or from the individual. The statement sets out individual rights to access, correct, delete, and object to processing, and recognizes EEA individuals' right to notification of automated decision-making or profiling. ADP commits to purpose-limited retention, post-termination data return or secure destruction, best-efforts security calibrated to data sensitivity, and written-contract protections before any transfer of Personal Data to third-party or internal processors. ADP states it has not sold Personal Data, including Sensitive Personal Data, in the preceding 12 months, while disclosing that it shares a broad range of identifiers — including government-issued identifiers — with ad networks.

As an individual whose data ADP processes, you have the right to access, correct, delete, or object to the processing of your Personal Data, and ADP recognizes these rights directly. If you are in the EEA, you also have the right to be notified of any automated decision-making or profiling applied to your data. ADP will only notify you of a data security breach if it determines you are at high risk of harm — individuals assessed as lower risk may not receive direct notification. ADP shares a wide range of your identifiers, including government-issued identifiers, with ad networks. To exercise your access, correction, deletion, or objection rights, you can engage ADP directly on the basis of those stated rights.