When ZipRecruiter acts as a service provider for an employer client, it processes your data under the employer's instructions, and if you want to access or delete your data, ZipRecruiter will direct you to contact the employer rather than handling your request directly.
This analysis describes what ZipRecruiter's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
If your personal data is processed by ZipRecruiter on behalf of an employer, your rights requests go to the employer, not ZipRecruiter, which may create delays or barriers to exercising your data rights.
Job seekers whose data is processed by ZipRecruiter as a service provider for an employer client must direct data access or deletion requests to the employer, not to ZipRecruiter, which means your ability to exercise privacy rights depends on the employer's responsiveness and processes.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
"In certain instances, our clients hire ZipRecruiter to provide services on behalf of the client. In such case, we process Personal Data under the direction of that client (the data controller) and have no direct relationship with the individuals (data subjects) whose Personal Data we process. Where ZipRecruiter processes your Personal Data in the capacity of a service provider (data processor), and you seek access, or want to correct, amend, or delete your Personal Data, or have other request, we will provide you with the data controller's contact information, so you can contact them directly.Excerpt from ZipRecruiter's Privacy Policy
REGULATORY LANDSCAPE: The controller/processor distinction is a foundational GDPR concept; under GDPR Article 28, processors must act only on controller instructions, and data subjects generally exercise their Article 15-22 rights against the controller.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
If your personal data is processed by ZipRecruiter on behalf of an employer, your rights requests go to the employer, not ZipRecruiter, which may create delays or barriers to exercising your data rights.
Job seekers whose data is processed by ZipRecruiter as a service provider for an employer client must direct data access or deletion requests to the employer, not to ZipRecruiter, which means your ability to exercise privacy rights depends on the employer's responsiveness and processes.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by ZipRecruiter.