The policy directs individuals wishing to exercise data protection rights to contact information provided in regional supplements, rather than providing a single global contact point in the main policy text.
This analysis describes what ADP's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that the procedural mechanism for exercising GDPR, CCPA, and other data subject rights is distributed across jurisdiction-specific supplements rather than centralized, which requires individuals to identify and access the correct regional notice before initiating a rights request.
Interpretive note: The specific contact mechanisms, response timelines, and verification requirements for each regional supplement are not reproduced in the document text provided and must be assessed from the individual regional notices.
ADP deleted the cookie preference management tool that previously allowed users to understand and control which cookies were placed on their devices, including functional, analytics, and advertising cookies. The removal eliminates the transparency mechanism through which users could consent to or opt out of different cookie categories. The practical effect depends on whether ADP has replaced this functionality elsewhere or whether cookies continue to be placed without equivalent granular user control.
View change record →Under this clause, individuals who wish to access, correct, delete, or restrict their personal data must locate and use the contact mechanism in the regional supplement applicable to their jurisdiction, and employees of ADP client organizations are additionally required to direct requests to their employer rather than to ADP.
How other platforms handle this
You can always contact your local data protection authority if you have concerns regarding your rights under local law.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
If you are an end user in a Workspace not owned by you and wish to update, delete, or receive any information we have about you, you may do so by contacting the organization who owns your ClickUp Workspace.
"If you would like to exercise any of your data protection rights, or if you have questions or concerns about this Privacy Statement or ADP's privacy practices, please contact us using the contact information provided in the applicable regional supplement.Excerpt from ADP's Privacy Statement
1) REGULATORY LANDSCAPE: This provision engages GDPR Articles 15-22 (data subject rights including access, rectification, erasure, restriction, portability, and objection), CCPA/CPRA rights for California residents, and equivalent rights frameworks in Canada, Australia, and other jurisdictions …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes that the procedural mechanism for exercising GDPR, CCPA, and other data subject rights is distributed across jurisdiction-specific supplements rather than centralized, which requires individuals to identify and access the correct regional notice before initiating a rights request.
Under this clause, individuals who wish to access, correct, delete, or restrict their personal data must locate and use the contact mechanism in the regional supplement applicable to their jurisdiction, and employees of ADP client organizations are additionally required to direct requests to their employer rather than to ADP.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by ADP.