Workday's privacy statement addresses how personal information is shared with third parties, though the specific categories of recipients, purposes, and safeguards are detailed in the full document which was not fully available for review.
This analysis describes what Workday's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Enterprise customers and individuals whose data is held by Workday need to understand which third parties may receive their personal information, whether as sub-processors in the platform context or as marketing partners in the controller context.
Interpretive note: Specific third-party sharing provisions could not be directly quoted as the document was truncated before the operative clauses were visible; this provision is characterized based on the statement's stated scope and Workday's known platform architecture.
Personal information provided to Workday through its website or platform may be shared with service providers, analytics partners, or other third parties as described in the full statement. The categories of sharing and any opt-out mechanisms depend on the complete document text.
How other platforms handle this
We will also provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected.
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
"That is why we are committed to transparency about how we collect, use, and share that information.Excerpt from Workday's Privacy Statement
(1) REGULATORY LANDSCAPE: GDPR Article 28 requires that sub-processors be disclosed and subject to equivalent data protection obligations.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Enterprise customers and individuals whose data is held by Workday need to understand which third parties may receive their personal information, whether as sub-processors in the platform context or as marketing partners in the controller context.
Personal information provided to Workday through its website or platform may be shared with service providers, analytics partners, or other third parties as described in the full statement. The categories of sharing and any opt-out mechanisms depend on the complete document text.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Workday.