Provision record
Indeed · Indeed Privacy Policy · View original document ↗

Employer DPA Required for Candidate Import Service

High severity Explicit document language Common · 298 of 352 platforms
Stay ahead of the changes
Track Indeed and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF
ⓘ

This analysis describes what Indeed's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

Recent Activity

This document changed recently

Medium Aug 13, 2026

The updated terms authorize Indeed to process personal data for a broader range of purposes, including fraud, abuse, platform-security threats, and risks to users or the public. The policy now explicitly states that Indeed may share information with law enforcement, regulators, and government authorities where lawful and appropriate, including in cases where sharing is voluntary rather than in response to compulsory legal process. For job seekers, device information is now included when applications are transferred to employers' systems, such as applicant tracking systems or scheduling platforms.

View change record →
Medium Jul 21, 2026

The updated policy explicitly includes phone number as a type of device information that Indeed collects. Previously, the policy described device information as limited to IP address, device ID, and user agent. Additionally, the policy now states that Indeed relies on legitimate interests not only for keeping sites safe and secure, but also for 'improving our Sites and services', which broadens the stated basis for processing personal data. These changes formalize expanded data collection categories and processing justifications under the same legal framework.

View change record →

How other platforms handle this

Stripe Medium

We require these service providers to contractually commit to security and confidentiality obligations for the Personal Data they process on our behalf.

Twitch Medium

The Terms of Service, which incorporate the Guidelines, is the entire agreement between you and Twitch relating to the subject matter herein and will not be modified except by a writing signed by authorized representatives of both parties...

Shopify Medium

If you are signing up for the Services on behalf of your employer, then you must use your employer-issued email address and you represent and warrant that you have the authority to bind your employer to our Terms of Service.

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
When you sign up for our Candidate Import service, you will be required to agree to a DPA with Indeed outlining the terms of our relationship.

Excerpt from Indeed's Privacy Policy

Provision details

Document information
Document
Indeed Privacy Policy
Entity
Indeed
Date stated by the document
Aug. 12, 2026
As printed in Indeed’s text (version CA-V-005750), not a ConductAtlas date.
Tracking information
First captured by ConductAtlas
July 11, 2026
Text quoted from version
CA-V-005750, captured Aug. 13, 2026
Record ID
CA-P-071241
Document ID
CA-D-000421
Evidence Provenance
Source URL
Wayback Machine
Extracted-text SHA-256 (version CA-V-005750)
cf3a7e8e3f655a93e581e41baf35851419781c6445f3001d1f55a9cde7dd0c22
Evidence
✓ Excerpt found verbatim in version CA-V-005750 (checked Oct. 5, 2026)
Citation Record
Entity: Indeed
Document: Indeed Privacy Policy
Record ID: CA-P-071241
Version: CA-V-005750
Captured: 2026-08-13 00:27:44 UTC
SHA-256: cf3a7e8e3f655a93…
URL: https://conductatlas.com/platform/indeed/indeed-privacy-policy/provision/CA-P-071241/employer-dpa-required-for-candidate-import-service/
Accessed: Oct. 8, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Indeed's Employer DPA Required for Candidate Import Service clause do?

The clause states: “When you sign up for our Candidate Import service, you will be required to agree to a DPA with Indeed outlining the terms of our relationship.”

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 298 platforms. See the full comparison.

Is ConductAtlas affiliated with Indeed?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Indeed.