Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy establishes procedures for individuals to request access to, correction of, or deletion of their personal data, and to object to processing, either through their online account or by contacting privacy@adp.com. For EEA individuals, additional rights including data portability and rights regarding automated decision-making are also stated.
This analysis describes what ADP's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the operational mechanism through which individuals may exercise data rights under GDPR, UK GDPR, CCPA, and the ADP BCR framework. EEA individuals have an additional right of data portability and notification regarding automated decision-making, with a dedicated EMEA Data Protection Officer contact provided.
ADP deleted the cookie preference management tool that previously allowed users to understand and control which cookies were placed on their devices, including functional, analytics, and advertising cookies. The removal eliminates the transparency mechanism through which users could consent to or opt out of different cookie categories. The practical effect depends on whether ADP has replaced this functionality elsewhere or whether cookies continue to be placed without equivalent granular user control.
View change record →Under this clause, individuals can request access to, correction of, or deletion of their personal data held by ADP by logging into their account or emailing privacy@adp.com. EEA-based individuals may also exercise data portability rights and contact the EMEA Data Protection Officer at DataProtectionOfficer.ADPEMEA@adp.com.
Cross-platform context
See how other platforms handle Individual Rights — Access, Correction, Erasure, and Objection and similar clauses.
Compare across platforms →Monitoring
ADP has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"ADP respects your right to access, correct, and delete your Personal Data, or object to the processing of your Personal Data. If you have an online account, you may log into your account to access update, or delete the information you have provided to us. Additionally, you may contact privacy@adp.com . to request access to your data, and to exercise any of the individual rights afforded to you by ADP's Privacy Code for Business Data, or by applicable data protection laws and regulations.Excerpt from ADP's Privacy Statement
REGULATORY LANDSCAPE: This provision engages GDPR Articles 15 through 22 (data subject rights including access, rectification, erasure, restriction, portability, and objection), UK GDPR equivalent provisions, and CCPA/CPRA rights to know, delete, and correct. The relevant enforcement authorities are EU national DPAs, the UK ICO, and the California Privacy Protection Agency. The policy states ADP will respond 'as soon as possible and in accordance with applicable data protection laws,' which aligns with GDPR's one-month response standard, though the policy does not state a specific response timeline. GOVERNANCE EXPOSURE: Low. The provision articulates recognized individual rights consistent with GDPR and CCPA requirements, and provides both online and email mechanisms for submitting requests. The absence of a specific response timeline beyond 'as soon as possible' may be noted in audits but is not a material deviation from common industry practice. JURISDICTION FLAGS: California residents are directed to a separate California Consumer Privacy Statement for additional rights details. EEA residents have additional rights (portability, automated decision-making notification) not extended globally. Organizations subject to GDPR should confirm that ADP's data subject rights response procedures satisfy their own processor obligations. CONTRACT AND VENDOR IMPLICATIONS: Organizations using ADP to process employee or customer data should confirm that ADP's data subject rights procedures are compatible with their own GDPR and CCPA obligations, including timelines for passing on data subject requests to ADP as a processor. COMPLIANCE CONSIDERATIONS: Compliance teams should document the process for routing data subject requests received from employees or customers to ADP, and confirm ADP's commitment to respond within GDPR's one-month window. Audit procedures should verify that ADP's BCR-based individual rights framework covers all relevant data categories processed on behalf of the organization.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes the operational mechanism through which individuals may exercise data rights under GDPR, UK GDPR, CCPA, and the ADP BCR framework. EEA individuals have an additional right of data portability and notification regarding automated decision-making, with a dedicated EMEA Data Protection Officer contact provided.
Under this clause, individuals can request access to, correction of, or deletion of their personal data held by ADP by logging into their account or emailing privacy@adp.com. EEA-based individuals may also exercise data portability rights and contact the EMEA Data Protection Officer at DataProtectionOfficer.ADPEMEA@adp.com.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by ADP.