This analysis describes what Workday's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Because Workday acts as a processor in employer-deployed contexts, it does not serve as the point of contact for individual rights requests, placing the practical burden on the individual to approach their organization instead.
If you want to exercise data protection rights over personal information held in an employer-deployed Workday system, you must contact your organization, not Workday.
How other platforms handle this
When you exercise any of your applicable legal rights to access, amend, or delete your personal information, we may request additional information from you for the purpose of confirming your identity.
For data portability requests, We will select a format to provide Your personal information that is readily useable and should allow You to transmit the information from one entity to another entity without hindrance.
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
Monitoring
Workday has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"If you have questions about how your organization uses your personal information with Workday, or if you want to exercise your data protection rights, please contact your organization directly.— Excerpt from Workday's Workday Privacy Statement
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Because Workday acts as a processor in employer-deployed contexts, it does not serve as the point of contact for individual rights requests, placing the practical burden on the individual to approach their organization instead.
If you want to exercise data protection rights over personal information held in an employer-deployed Workday system, you must contact your organization, not Workday.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Workday.