This analysis describes what ADP's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This dual-role structure establishes different legal responsibilities and accountability frameworks for ADP's data processing activities. When ADP acts as a processor, the client employer retains primary data control obligations; when ADP acts as a controller, ADP assumes direct responsibility for establishing lawful bases for processing.
ADP deleted the cookie preference management tool that previously allowed users to understand and control which cookies were placed on their devices, including functional, analytics, and advertising cookies. The removal eliminates the transparency mechanism through which users could consent to or opt out of different cookie categories. The practical effect depends on whether ADP has replaced this functionality elsewhere or whether cookies continue to be placed without equivalent granular user control.
View change record →The provision establishes that ADP's data handling obligations and legal accountability vary by processing purpose. Users should understand whether their data is being processed under employer instructions (processor role) or for ADP's independent business purposes (controller role), as each carries different compliance and rights frameworks.
How other platforms handle this
Amplitude acts as a data controller when we collect and use Personal Information for our own purposes, such as providing and improving our Services, marketing, and other business operations. When Amplitude processes Personal Information on behalf of our customers (for example, event data that our cu...
When our business customers use certain Services, we generally process and store limited personal information on their behalf as a data processor. For certain products such as Docusign's Contract Lifecycle Management (CLM) and Identity products, we may act as a processor and as a controller in certa...
To make the Platform more relevant and enjoyable for you, we customize parts of your experience on the Platform to show you creators and content we think you will be interested in, including ads and other content sponsored by or in collaboration with our creators and our partners. We customize what ...
Monitoring
ADP has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"When ADP provides services to our clients (such as employers), ADP generally acts as a data processor, processing personal data on behalf of and under the instructions of the client, who is the data controller. In other contexts — such as when ADP collects and uses business contact information for its own marketing purposes, or when ADP uses data to improve its products and services — ADP acts as an independent data controller and is responsible for ensuring that such processing has a lawful basis.— Excerpt from ADP's ADP Privacy Statement
We read the privacy policies and terms of service of 38 AI platforms. Here is what they say about training, retention, arbitration, and liability.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This dual-role structure establishes different legal responsibilities and accountability frameworks for ADP's data processing activities. When ADP acts as a processor, the client employer retains primary data control obligations; when ADP acts as a controller, ADP assumes direct responsibility for establishing lawful bases for processing.
The provision establishes that ADP's data handling obligations and legal accountability vary by processing purpose. Users should understand whether their data is being processed under employer instructions (processor role) or for ADP's independent business purposes (controller role), as each carries different compliance and rights frameworks.
ConductAtlas has identified this type of provision across 1 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by ADP.