“ADP will strive to provide security that is proportional to the sensitivity of the Personal Data being protected, with the greatest effort being focused on protecting Sensitive Personal Data...”
This analysis describes what ADP's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The obligation is qualified by 'strive to provide,' which is a best-efforts standard rather than a guarantee, and the commitment is calibrated to data sensitivity rather than uniform across all data.
ADP deleted the cookie preference management tool that previously allowed users to understand and control which cookies were placed on their devices, including functional, analytics, and advertising cookies. The removal eliminates the transparency mechanism through which users could consent to or opt out of different cookie categories. The practical effect depends on whether ADP has replaced this functionality elsewhere or whether cookies continue to be placed without equivalent granular user control.
View change record →ADP commits to a best-efforts standard of security scaled to data sensitivity, with Sensitive Personal Data receiving the greatest protective effort.
How other platforms handle this
GDPR...requires organizations to maintain appropriate security of personal data.
We use commercially reasonable administrative, organizational, technical and physical security controls to protect your Personal Information from unauthorized access, modification, disclosure, or destruction.
We have implemented administrative, technical, physical, electronic, and managerial procedures to safeguard and secure the information we collect from loss, misuse, unauthorized access, disclosure, alteration, and destruction.
"ADP will strive to provide security that is proportional to the sensitivity of the Personal Data being protected, with the greatest effort being focused on protecting Sensitive Personal Data...Excerpt from ADP's Privacy Statement
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The obligation is qualified by 'strive to provide,' which is a best-efforts standard rather than a guarantee, and the commitment is calibrated to data sensitivity rather than uniform across all data.
ADP commits to a best-efforts standard of security scaled to data sensitivity, with Sensitive Personal Data receiving the greatest protective effort.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by ADP.