The policy directs California residents to a separate CCPA-specific notice for information about their rights under California privacy law, including rights to access, deletion, correction, and opt-out of data sale or sharing.
This analysis describes what ADP's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision identifies a jurisdiction-specific supplement that governs California residents' data rights, which is operationally significant because CPRA rights including the right to opt out of sale or sharing for targeted advertising apply to ADP's data controller activities and are governed by the California notice rather than the global policy.
Interpretive note: The content of the California CCPA supplement is referenced but not reproduced in the document text provided, so the specific rights, opt-out mechanisms, and data categories disclosed therein cannot be fully assessed from this document alone.
ADP deleted the cookie preference management tool that previously allowed users to understand and control which cookies were placed on their devices, including functional, analytics, and advertising cookies. The removal eliminates the transparency mechanism through which users could consent to or opt out of different cookie categories. The practical effect depends on whether ADP has replaced this functionality elsewhere or whether cookies continue to be placed without equivalent granular user control.
View change record →California residents' privacy rights under CCPA and CPRA, including the right to know what personal data is collected, the right to delete, the right to correct, and the right to opt out of the sale or sharing of personal data, are addressed in a separate California-specific notice referenced by the policy rather than in the global privacy statement itself.
How other platforms handle this
By providing your mobile phone number, you consent to receive automated text (SMS) messages from Instacart...To opt out, reply STOP. For help, reply HELP or contact us directly...
To opt out of the offline disclosure of your information to third parties for these purposes, please email us at privacy@makenotion.com.
California residents have the right to request certain information regarding our disclosure of personal information...to third parties for their direct marketing purposes unless we provide them with an ability to exercise choice regarding such disclosures.
"If you are a California resident, please see our California Consumer Privacy Act Notice for additional information about your rights and our privacy practices.Excerpt from ADP's Privacy Statement
1) REGULATORY LANDSCAPE: This provision engages the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), enforced by the California Privacy Protection Agency (CPPA) and the California Attorney General.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision identifies a jurisdiction-specific supplement that governs California residents' data rights, which is operationally significant because CPRA rights including the right to opt out of sale or sharing for targeted advertising apply to ADP's data controller activities and are governed by the California notice rather than the global policy.
California residents' privacy rights under CCPA and CPRA, including the right to know what personal data is collected, the right to delete, the right to correct, and the right to opt out of the sale or sharing of personal data, are addressed in a separate California-specific notice referenced by the policy rather than in the global privacy statement itself.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by ADP.