California residents have specific legal rights over their personal data held by ADP, including the right to see what data has been collected, to request deletion, to correct errors, and to opt out of certain data sharing practices.
This analysis describes what ADP's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
CCPA provides enforceable rights backed by California law, including the right to opt out of data sharing that could affect advertising and marketing uses of your information, and the right to non-discrimination for exercising those rights.
ADP deleted the cookie preference management tool that previously allowed users to understand and control which cookies were placed on their devices, including functional, analytics, and advertising …
California residents interacting directly with ADP as a controller can exercise meaningful data rights including opting out of the sale or sharing of personal information, which could affect how ADP uses their data for marketing and analytics purposes.
How other platforms handle this
If you are a California resident, you have the right to know what personal information we collect, use, disclose, and sell about you. You have the right to request deletion of your personal information, subject to certain exceptions. You have the right to opt out of the sale or sharing of your perso...
If you are a California resident, you have the right to know what personal information we collect about you, the right to delete personal information we have collected from you, the right to correct inaccurate personal information, the right to opt out of the sale or sharing of your personal informa...
If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA) including the right to know what personal information we collect about you, the right to delete personal information we have collected about you, and the right to opt-out of the sale of your pe...
Monitoring
ADP has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"If you are a California resident, you may have certain rights under the California Consumer Privacy Act (CCPA). These rights may include: the right to know about personal information collected, disclosed, or sold; the right to delete personal information collected from you; the right to opt-out of the sale or sharing of personal information; the right to correct inaccurate personal information; the right to limit the use and disclosure of sensitive personal information; and the right to non-discrimination for exercising your CCPA rights.— Excerpt from ADP's ADP Privacy Statement
REGULATORY LANDSCAPE: This provision engages the California Consumer Privacy Act as amended by the California Privacy Rights Act, enforced by the California Privacy Protection Agency (CPPA) and the California Attorney General. The CPPA has rulemaking and enforcement authority. ADP's obligations differ depending on whether it acts as a business or a service provider under CCPA, which maps to the controller/processor distinction. As a service provider, ADP's obligations to California residents run primarily through the employer-client. GOVERNANCE EXPOSURE: Medium. ADP's dual role as controller and processor creates CCPA complexity. For activities where ADP is a business under CCPA, it must respond to consumer rights requests within statutory timeframes and cannot discriminate against consumers who exercise rights. For activities where it is a service provider, the employer-client bears primary responsibility. The policy does not clearly delineate which ADP activities constitute 'sale' or 'sharing' under CCPA, which may create compliance gaps. JURISDICTION FLAGS: California-specific exposure. Employees of California-based employers who use ADP should be aware that their rights primarily run through their employer in the service provider context. Direct ADP customers and website visitors in California have rights directly against ADP as a business. Other US states including Virginia, Colorado, Connecticut, and Texas have enacted similar privacy laws that may require evaluation under ADP's broader privacy framework. CONTRACT AND VENDOR IMPLICATIONS: California employer-clients should ensure their service agreements with ADP contain CCPA-compliant service provider contractual terms prohibiting ADP from selling or sharing employee personal information for purposes other than those specified in the contract. Procurement teams should request ADP's CCPA data flow documentation. COMPLIANCE CONSIDERATIONS: ADP should maintain processes to respond to California resident rights requests within the 45-day statutory period. Employers using ADP should train HR teams to route employee CCPA requests appropriately. Organizations should audit whether any ADP data practices constitute 'sharing' for cross-context behavioral advertising under CPRA.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
CCPA provides enforceable rights backed by California law, including the right to opt out of data sharing that could affect advertising and marketing uses of your information, and the right to non-discrimination for exercising those rights.
California residents interacting directly with ADP as a controller can exercise meaningful data rights including opting out of the sale or sharing of personal information, which could affect how ADP uses their data for marketing and analytics purposes.
ConductAtlas has identified this type of provision across 4 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by ADP.