Upwork and its advertising partners use cookies and similar trackers to monitor how you use the platform and across the web, including for targeted advertising.
This analysis describes what Upwork's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Behavioral tracking technologies can build detailed profiles of your online activity, and the data collected may be shared with advertising partners. Users in the EU have a legal right to consent to or reject non-essential cookies.
Interpretive note: The exact verbatim text could not be confirmed from the truncated document. The actual configuration and compliance of Upwork's consent management platform cannot be assessed from the policy text alone.
Upwork's privacy policy previously disclosed that it complied with the U.S. Data Privacy Framework and certified adherence to its Principles regarding how it processes personal data from EU, UK, and Swiss residents. The updated policy removes nearly all of this language, including the explicit commitment to Data Privacy Framework Principles and the statement that those Principles would govern in case of conflict with other policy terms. Users in the EU, UK, and Switzerland no longer have a clear, policy-level statement of the legal framework protecting their data when transferred to the U.S., which may reduce transparency about data protection safeguards. You may contact Upwork to request copies of the data transfer mechanism documents it uses.
View change record →The updated policy now explicitly states that Upwork complies with the U.S. Data Privacy Framework and has certified to the U.S. Department of Commerce that it adheres to DPF principles when processing personal data from EU, UK, and Swiss residents. The policy establishes that if any conflict exists between Upwork's privacy policy and DPF principles, the DPF principles will govern. This creates an explicit legal hierarchy for data protection standards applicable to residents of those jurisdictions. Users from affected regions can visit https://www.dataprivacyframework.gov/ to view Upwork's certification and learn more about the DPF program.
View change record →Upwork uses cookies and third-party tracking tools that monitor your browsing behavior both on and potentially off the Upwork platform for advertising and analytics purposes. EU users must be given a genuine choice to accept or reject these cookies, and you can update your preferences through Upwork's cookie settings.
How other platforms handle this
At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.
If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to access, correct, or erase your personal data; the right to restrict or object to our processing of your personal data; the right to data portability; and, where our processing is based on your...
We may display advertisements on our Services and those advertisements may be targeted to your interests based on your personal information. We may share your personal information with advertising partners for interest-based advertising purposes. You may opt out of interest-based advertising by visi...
Monitoring
Upwork has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We and our third-party partners may use cookies, web beacons, and other tracking technologies on our platform to collect information about your browsing activities, device, and usage of our services for purposes including analytics, advertising, and personalization.— Excerpt from Upwork's Upwork Privacy Policy
REGULATORY LANDSCAPE: The ePrivacy Directive (EU Cookie Directive) and GDPR together require that non-essential cookies be set only with the user's prior, freely given, specific, and informed consent. The UK's PECR implements equivalent requirements for UK users. The FTC has issued guidance on online tracking and behavioral advertising, and the California Consumer Privacy Act/CPRA includes provisions on the sale and sharing of personal information collected through tracking technologies. The Global Privacy Control signal must be honored for California users as an opt-out mechanism under CPRA. GOVERNANCE EXPOSURE: High. Cookie consent compliance is one of the most actively enforced areas of EU data protection law. Consent management platforms must be configured to ensure that tracking cookies are not loaded prior to user consent and that the consent interface does not use dark patterns. Failure to comply has resulted in significant fines from EU data protection authorities. JURISDICTION FLAGS: EU/EEA users have the strongest protections and must be offered a genuine reject-all option equivalent in prominence to the accept option. California users are protected by CPRA's opt-out provisions for sharing personal information through tracking technologies. Users in other US states with comprehensive privacy laws (Colorado, Virginia, Connecticut) have similar opt-out rights. UK users are covered by PECR. CONTRACT AND VENDOR IMPLICATIONS: Enterprise clients should assess whether Upwork's use of advertising cookies on pages where enterprise users interact with the platform is consistent with the enterprise's own data protection obligations. If enterprise users access Upwork through a corporate environment, the enterprise may have independent obligations regarding cookie consent. COMPLIANCE CONSIDERATIONS: The consent management platform used by Upwork should be audited to confirm that: (1) consent is obtained before non-essential cookies are set; (2) withdrawal of consent is as easy as giving it; (3) the Global Privacy Control signal is honored for California users; and (4) the list of third-party cookie partners is current and disclosed.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Behavioral tracking technologies can build detailed profiles of your online activity, and the data collected may be shared with advertising partners. Users in the EU have a legal right to consent to or reject non-essential cookies.
Upwork uses cookies and third-party tracking tools that monitor your browsing behavior both on and potentially off the Upwork platform for advertising and analytics purposes. EU users must be given a genuine choice to accept or reject these cookies, and you can update your preferences through Upwork's cookie settings.
ConductAtlas has identified this type of provision across 79 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Upwork.