Provision record
Workday · Workday Privacy Statement · View original document ↗

Users must contact organization to exercise processor-side rights

High confidence Common · 276 of 343 platforms

Key Facts · in the document’s own words

Who does Workday direct individuals to contact to exercise data protection rights?
“If you have questions about how your organization uses your personal information with Workday, or if you want to exercise your data protection rights, please contact your organization directly.”
Version CA-V-006719, captured Sept. 11, 2026 · live source ↗
Our reading, not the document’s words
Workday directs individuals who want to exercise data protection rights regarding employer-controlled personal information to contact their organization directly.
Stay ahead of the changes
Track Workday and hear on the next check after its terms change. We check daily where we can, and show you where we can't.
Share 𝕏 Share in Share 🔒 PDF
ⓘ

This analysis describes what Workday's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Generated by a model from the captured document; not read by a person

Because Workday acts as a processor in employer-deployed contexts, it does not serve as the point of contact for individual rights requests, placing the practical burden on the individual to approach their organization instead.

Consumer impact (what this means for users)

Generated by a model from the captured document; not read by a person

If you want to exercise data protection rights over personal information held in an employer-deployed Workday system, you must contact your organization, not Workday.

How other platforms handle this

Kling AI

You may exercise the abovementioned rights free of charge by contacting us at the contact details in the "Contact Information" section of this Policy.

Teladoc

You can opt out of third parties collecting your Personal Information for targeted advertising purposes in the United States by visiting the National Advertising Initiative's (NAI) opt-out page...

Postman

Covered individuals are able to exercise certain choices under the EU-U.S. DPF, UK DPF Extension, and the Swiss-U.S. DPF regarding how some of their personal information is used and shared, and may access, correct, or delete certain personal information...

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
If you have questions about how your organization uses your personal information with Workday, or if you want to exercise your data protection rights, please contact your organization directly.

Excerpt from Workday's Privacy Statement

Provision details

Document information
Document
Workday Privacy Statement
Entity
Workday
Date stated by the document
Feb. 27, 2026
As printed in Workday’s text (version CA-V-006719), not a ConductAtlas date.
Tracking information
First captured by ConductAtlas
May 5, 2026
Text quoted from version
CA-V-006719, captured Sept. 11, 2026
Record ID
CA-P-051482
Document ID
CA-D-000643
Evidence Provenance
Source URL
Wayback Machine
Archived bytes SHA-256 (version CA-V-006719)
051d040720f6946fe5acfd6eb2c2e7227d58fd6fc5cd477c0a7efb3f67dc1a79
Analysis generated
May 8, 2026 08:59 UTC
Methodology
Evidence
✓ Excerpt found in version CA-V-006719, captured Sept. 11, 2026 (checked Oct. 5, 2026)
Citation Record
Entity: Workday
Document: Workday Privacy Statement
Record ID: CA-P-051482
Version: CA-V-006719
Captured: 2026-09-11 00:49:07 UTC
SHA-256: 051d040720f6946f…
URL: https://conductatlas.com/platform/workday/workday-privacy-statement/provision/CA-P-051482/users-must-contact-organization-to-exercise-processor-side-rights/
Accessed: Oct. 26, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Categories

Other risks in this policy

Related Analysis

Get the weekly coverage letter

Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.

Frequently Asked Questions

What does Workday's Users must contact organization to exercise processor-side rights clause do?

Because Workday acts as a processor in employer-deployed contexts, it does not serve as the point of contact for individual rights requests, placing the practical burden on the individual to approach their organization instead.

How does this clause affect you?

If you want to exercise data protection rights over personal information held in an employer-deployed Workday system, you must contact your organization, not Workday.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 276 platforms. See the full comparison.

Is ConductAtlas affiliated with Workday?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Workday.