Company: ADP
Filing Date: 2025-09-25
Form Type: DEF 14A
Source: 0001308179-25-000607
Chunk: 26

Company: AUTOMATIC DATA PROCESSING INC
Filing Date: 2025-09-25
Form: DEF 14A
Chunk 26
---
           
 National Institute of Standards and Technology Cybersecurity Framework.                                                                          |     |   |                                                                                                                                           |
| ✓ | The status of these initiatives is then reviewed with our board during its quarterly meetings. This governance process encourages an environment 
 of continuous improvement.                                                                                                                       |     |   |                                                                                                                                           |
| ✓ | In advance of these quarterly meetings, members of our board with cybersecurity expertise may informally meet with our chief administrative      
 officer, chief security officer and other members of leadership, as appropriate, to advise and provide additional guidance and industry          
 insights to the company.                                                                                                                         |     |   |                                                                                                                                           |

| Automatic Data Processing, Inc. – Proxy Statement | | | 24 |

| Corporate Governance |

| Oversight of Privacy                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
| Intertwined with our global cybersecurity program is our global privacy program. Our audit committee oversees matters of privacy and receives reports on these matters at each meeting from our chief administrative officer, as well as regular updates from our head of global compliance, including on related risk assessment and risk management activities. On a management level, ADP’s privacy program is led by ADP’s global chief privacy officer and the members of the global data privacy and governance team, in cooperation with the privacy stewards of all of ADP’s business units and functional areas. Our global chief privacy officer provides regular reports to our company’s executive committee, and our audit committee is actively engaged in the oversight of our global privacy program. Our global data privacy and governance team, in cooperation with the chief data office, also is responsible for our artificial intelligence (“AI”) ethics and governance program, which drives compliance with AI ethical principles and regulatory requirements in development and usage of AI systems, including generative AI tools. AI governance is integrated with the reporting discussed above. |

| ✓ | ADP’s Privacy Commitment: We are committed to compliance with privacy requirements and the protection of all personal data processed by ADP. ADP has adopted a set of privacy principles that serve as the foundation for our global privacy program, which includes our global privacy policy and our binding corporate rules (“BCRs”), all of which may be found in greater detail on our corporate website, at www.adp.com. To access this information, click on “About” then “Data Privacy.” |                                                                                                                                           |
| ✓ | Our BCRs cover the transfer of data between ADP affiliates across the globe and ensure the highest standard of protection to personal                                                                                                                                                                                                                                                                                                                                                            
 data processed by ADP, regardless of where