No public evidenceCDK Global and GDPR
CertReports found no public GDPR evidence for CDK Global as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 24 Oct 2016
- Scope
- CDK processes personal information of past and present employees in reliance on the Privacy Shield for human resources activities and employment purposes, including: (1) recruitment and staffing; (2) administration of compensation and benefit programs; (3) time and expense management and other workplace administration, (4) performance management and training, including verification of compliance with CDK Global policies and procedures; (5) talent management, advancement and succession planning; (6) identity verification and authentication, including system administration and access credentialing, (7) legal compliance and risk management; (8) corporate audit, analysis and consolidated reporting; (9) to protect CDK, its workforce, its clients and the public against injury, theft, legal liability, fraud or abuse; (10) to protect employee and client sensitive information against improper access, use, access, alteration or destruction; and (11) other legal and customary business-related purposes, such as making back-up copies of files for business continuity, as needed for computer system maintenance and other everyday human resources purposes. CDK may disclose such personal information (1) to its affiliates for the purposes listed above, (2) to data processors who use the data only for CDK?s purposes and under CDK?s instructions, (3) to those companies that provide benefits and services to covered employees, (4) where required by law, or (5) where permitted by law, such as with covered employee?s consent or in the event of an emergency. CDK may also disclose such personal information to an acquiring organization if CDK is involved in a sale or a transfer of some or all of its business.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | CDK Global: Inactive | Live pagesha256 8c83bd5dcd |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is CDK Global GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Automotive and mobility category) whose GDPR row is verified or vendor-stated, ranked by similarity.
No Automotive and mobility vendor has GDPR evidence in the index yet.