Company: ADP
Filing Date: 2025-08-06
Form Type: 10-K
Source: 0000008670-25-000037
Chunk: 12

Company: AUTOMATIC DATA PROCESSING INC
Filing Date: 2025-08-06
Form: 10-K
Item: Item 1
Chunk 12
---
 European Union’s (the “EU”) General Data Protection Regulation (the “GDPR”),  the California Privacy Rights Act of 2020 (the “CPRA”), and the Department of Justice’s (the “DOJ”) Data Security Program established under Executive Order 14117, impact our processing of personal information of our employees and on behalf of our clients. The GDPR imposes strict and comprehensive requirements on us as both a data controller and a data processor. As part of our overall data protection compliance program, including with respect to data protection laws in the EU, we are one of the few companies in the world to have implemented Binding Corporate Rules (“BCRs”). Compliance with our BCRs permits us to process and transfer personal data across borders in accordance with the GDPR and other data protection laws in the EU. The CPRA requires companies to provide data disclosure, access, deletion and opt-out rights to consumers in California. The DOJ’s Data Security Program requires us to ensure that there is not access to sensitive personal data of U.S. persons by countries of concern in excess of certain thresholds. In the area of AI, some states and localities in the U.S., the EU and elsewhere have proposed or already enacted legislation that imposes obligations on how we develop and market AI-based products and solutions. Specifically, the EU Artificial Intelligence Act imposes requirements on providers of certain types of AI services. Additionally, self-regulatory frameworks like the National Institute of Standards and Technology AI Risk Management Framework are being promulgated and adherence to these may become an industry standard or client expectation. In the United States, the Health Insurance Portability and Accountability Act of 1996 applies to our insurance services businesses and ADP TotalSource.As part of our payroll and payroll tax management services, we move client funds to our clients’ employees, tax authorities and other payees via electronic transfer, direct deposit, prepaid access and ADPCheck. In 2019, the Office of the Comptroller of Currency (the “OCC”) authorized us to open ADP Trust Company, National Association (the “ADP Trust Bank”), via a national trust bank charter pursuant to the National Bank Act. The ADP Trust Bank is the sole trustee of ADP Client Trust, our grantor trust which holds U.S. client funds, and is responsible for the oversight and management of those client funds. The ADP Trust Bank, and all of its fiduciary activities including the U.S. money movement it oversees and manages via ADP Client Trust, is subject to comprehensive ongoing oversight