Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This document explains how Workday handles your personal information depending on whether you are using a Workday application provided by your employer, visiting Workday's website, or registering for a Workday event. If your employer provides your Workday application, your employer—not Workday—controls your data, and you must contact your employer to exercise privacy rights over it. Workday uses AI tools to analyze calls and meetings and to infer your professional interests for personalized outreach, and it acknowledges that sharing your data through website cookies for targeted advertising may count as a sale of your information.
The Workday Privacy Statement establishes the conditions under which Workday collects, uses, retains, and shares personal information across its website, events, and enterprise cloud applications. In employer-deployed contexts, Workday acts as a processor on behalf of the employing organization, which is the controller of user personal information, and individuals seeking to exercise data protection rights over that information are directed to their organization rather than to Workday. Workday applies AI-powered tools to analyze recorded calls and online meetings and to infer professional interests from combined datasets for communication personalization, while explicitly committing that no purely automated processing produces legal or similarly significant effects on individuals. Workday retains personal information for as long as it determines a legitimate business need exists, may disclose personal information to third parties through cookies and trackers for targeted advertising in a manner it acknowledges may constitute a sale or share, and restricts service providers to using personal information only as Workday instructs.
If you access Workday through an employer-provided application, Workday processes your personal information on your employer's behalf, and your employer is the party responsible for how that information is handled; to exercise data protection rights over that information, you must contact your organization directly. On Workday's own website, your activity through cookies and trackers may be shared with third parties for targeted advertising in a way Workday itself characterizes as a potential sale or share of your data. If you register for a Workday event, your contact information, health and safety details, and payment card data are collected, and your contact information and stated interests may be shared with approved third-party collaborators who may then contact you independently. Workday retains your personal information for as long as it determines a legitimate business need exists, without a fixed end date.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
Workday has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle Buyer in business transaction must honor Privacy Statement purposes and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.