Glassdoor has formally designated legal entities to represent it under GDPR for users in the UK and EU, meaning those users have specific data rights they can exercise against these named entities.
This analysis describes what Glassdoor's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Naming specific GDPR representatives means EU and UK users have clear entities to contact with data rights requests, complaints, or regulatory concerns, which is a meaningful compliance commitment.
The updated policy grants EU, UK, and Swiss residents explicit rights to request access to their personal data held by Glassdoor in the United States, and to correct, amend, or delete that data. Glassdoor commits to responding to deletion requests within a reasonable timeframe and to obtaining explicit consent before sharing sensitive data with third parties or using data for purposes beyond the original collection. You can exercise these rights by following the instructions in the 'Controlling Your Personal Data' section of the policy.
View change record →The updated privacy policy removes explicit language granting users the right to correct, amend, or delete personal information held by Glassdoor. It also eliminates the documented right to opt-out before data is shared with third parties or used for purposes beyond the original collection. Previously, users could request limits on data use and disclosure; this right is no longer stated in the policy. Instead, the updated terms establish binding arbitration as the mechanism for resolving privacy complaints. Under the revised policy, users who have unresolved privacy concerns may invoke binding arbitration through TrustArc, but they no longer have contractually documented access to data correction, deletion, opt-out, or use-limitation mechanisms.
View change record →Renamed from 'GDPR Dual-Representative Structure' with empty excerpt to current version that explicitly designates Glassdoor LLC as data controller and names specific UK and EU GDPR representatives.
View full change record →EU users can direct GDPR data rights requests (access, deletion, portability, objection) to Glassdoor Hiring Solutions Ireland Ltd., and UK users can direct requests to Glassdoor Global Ltd., giving users specific and named points of contact for data rights enforcement.
How other platforms handle this
Where ZipRecruiter processes your Personal Data in the capacity of a service provider (data processor), and you seek access, or want to correct, amend, or delete your Personal Data...we will provide you with the data controller's contact information, so you can contact them directly.
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
"Glassdoor LLC is the data controller for our services. Our representative in the UK for GDPR: Glassdoor Global Ltd. Our representative in the EU for GDPR: Glassdoor Hiring Solutions Ireland Ltd.Excerpt from Glassdoor's Privacy Policy
(1) REGULATORY LANDSCAPE: GDPR Article 27 requires non-EU/UK established controllers with EU/UK processing activities to designate a representative in each jurisdiction.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Naming specific GDPR representatives means EU and UK users have clear entities to contact with data rights requests, complaints, or regulatory concerns, which is a meaningful compliance commitment.
EU users can direct GDPR data rights requests (access, deletion, portability, objection) to Glassdoor Hiring Solutions Ireland Ltd., and UK users can direct requests to Glassdoor Global Ltd., giving users specific and named points of contact for data rights enforcement.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Glassdoor.