ADP shares your personal data with its related companies, business clients, outside vendors, government agencies when required, and with any company that acquires ADP or its business units.
This analysis describes what ADP's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Your personal data including payroll figures and health information may be shared with a broad range of entities, and in the event of a merger or acquisition, it could transfer to a new owner whose privacy practices may differ.
ADP deleted the cookie preference management tool that previously allowed users to understand and control which cookies were placed on their devices, including functional, analytics, and advertising cookies. The removal eliminates the transparency mechanism through which users could consent to or opt out of different cookie categories. The practical effect depends on whether ADP has replaced this functionality elsewhere or whether cookies continue to be placed without equivalent granular user control.
View change record →ADP's data sharing extends to subsidiaries, employer-clients, third-party service providers, and potential acquirers, meaning sensitive employment and financial data may be accessed by a wide network of entities with varying privacy standards.
How other platforms handle this
Protect us, our business, our users, and others, for example to enforce our terms of service, prevent spam or other unwanted communications, and investigate or protect against fraud
we may use, retain or share information with law enforcement or others in circumstances where a person's vital interests require protection, such as in the case of emergencies.
Third-party apps use data from Gemini consistent with their own privacy policies and terms.
"We may share your personal data with: ADP subsidiaries and affiliates; our Clients, for whom we process personal data; third-party service providers who perform services on our behalf; business partners, to the extent you have engaged with their products or services; governmental authorities when required by law or to protect ADP's rights; and successors or assigns in connection with a business transaction such as a merger, acquisition, or sale of assets.Excerpt from ADP's Privacy Statement
REGULATORY LANDSCAPE: Third-party data sharing engages GDPR Article 13 disclosure requirements, which require that data subjects be informed of recipients or categories of recipients at the time of collection.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Your personal data including payroll figures and health information may be shared with a broad range of entities, and in the event of a merger or acquisition, it could transfer to a new owner whose privacy practices may differ.
ADP's data sharing extends to subsidiaries, employer-clients, third-party service providers, and potential acquirers, meaning sensitive employment and financial data may be accessed by a wide network of entities with varying privacy standards.
ConductAtlas has identified this type of provision across 287 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by ADP.