This analysis describes what Indeed's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The updated terms authorize Indeed to process personal data for a broader range of purposes, including fraud, abuse, platform-security threats, and risks to users or the public. The policy now explicitly states that Indeed may share information with law enforcement, regulators, and government authorities where lawful and appropriate, including in cases where sharing is voluntary rather than in response to compulsory legal process. For job seekers, device information is now included when applications are transferred to employers' systems, such as applicant tracking systems or scheduling platforms.
View change record →The updated policy explicitly includes phone number as a type of device information that Indeed collects. Previously, the policy described device information as limited to IP address, device ID, and user agent. Additionally, the policy now states that Indeed relies on legitimate interests not only for keeping sites safe and secure, but also for 'improving our Sites and services', which broadens the stated basis for processing personal data. These changes formalize expanded data collection categories and processing justifications under the same legal framework.
View change record →How other platforms handle this
You must confirm any transaction...attempted online before relying on it being completed. It is your responsibility to verify the status of any attempted transaction by reviewing your accounts or contacting SoFi Customer Support.
If we rely on certain legal bases (such as "legal obligation" or "contractual necessity") and you do not provide us with your Personal Data, we may not be able to lawfully provide you services.
Own or control the server and continue to do so for the whole time that you charge for access to it
"Employers agree to comply with all their responsibilities under applicable data protection rules with respect to the collection, processing, and storage of Personal Data, as well as providing adequate protection of all data subject rights provided for under all applicable data protection rules.Excerpt from Indeed's Privacy Policy
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The clause states: “Employers agree to comply with all their responsibilities under applicable data protection rules with respect to the collection, processing, and storage of Personal Data, as well as providing adequate protection of all data subject rights provided for under all applicable data protection rules.”
ConductAtlas has identified this type of provision across 298 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Indeed.