Applicant Privacy Addendum (EEA, UK, and Switzerland)

Last Updated: February 26, 2026

This Applicant Privacy Addendum (European Economic Area, United Kingdom, and Switzerland) (“EU Applicant Addendum”) is an attachment to the Global Job Applicant Privacy Notice (“Applicant Privacy Notice”) and applies to individuals permanently residing in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland. Where this EU Applicant Addendum conflicts with the Applicant Privacy Notice, this EU Applicant Addendum governs with respect to EEA, UK, and Swiss individuals.

The Applicant Privacy Notice explains what personal information we collect and how we use and share it. Please refer to the Applicant Privacy Notice for that and other relevant information. 

1. Who Is Responsible for Your Personal Information

Upwork is the data controller responsible for your personal information. You can contact us about privacy questions or requests at:

  • HR requests: ask-hris@upwork.com
  • Privacy questions: privacy@upwork.com

2. Why Upwork Processes Your Personal Information

Upwork processes your information for the purposes described in section 4 of the Applicant Privacy Notice. This processing is performed:

  • As necessary to consider your application for employment with Upwork.
  • To comply with legal obligations.
  • As necessary for our legitimate business interests provided that these interests do not override your rights.
  • In limited cases where you have given consent.

3. Your Rights

Individuals in the EEA, UK, and Switzerland have the privacy rights described in the Applicant Privacy Notice, including the right to access, correct, delete, restrict, or object to the processing of their personal information, request data portability, withdraw consent where applicable, and lodge a complaint with a supervisory authority. Please review the Applicant Privacy Notice for more information about these rights, and how to exercise them.  

4. Sensitive Personal Information

Some of the personal information described in the Applicant Privacy Notice — such as health information, disability information, or certain diversity-related information — is considered sensitive under European data protection laws.

We process this information only where permitted by law, including where necessary to:

  • Comply with employment, labor, tax, social security, benefits, and workplace safety laws
  • Assess working capacity or provide workplace accommodations
  • Establish, exercise, or defend legal claims
  • Support voluntary diversity and inclusion initiatives (where participation is optional)

5. Cross-Border Processing

Personal information of individuals may be transferred to, stored in, or otherwise processed in jurisdictions outside the EEA, UK, and Switzerland including the United States, and may be subject to the laws of those jurisdictions. Upwork will use appropriate legal transfer mechanisms, including Standard Contractual Clauses, where required by law. You may request additional information about these safeguards by contacting privacy@upwork.com.

6. Providing Personal Information

Some personal information is required in order to evaluate your application. If you do not provide required information, we may not be able to move forward with your application. Where information is optional, we will indicate this at the time of collection.

7. Automated Decision Making

We do not make employment decisions based solely on automated processing (such as profiling) that have legal or significant effects on you without human review. If this changes, we will give you appropriate notice.

8.EU Representative

Upwork has appointed representatives in certain jurisdictions in accordance with applicable data protection laws.

General Data Protection Regulation (GDPR) – European Representative

Pursuant to Article 27 of the General Data Protection Regulation (GDPR), Upwork has appointed European Data Protection Office (EDPO) as its GDPR Representative in the EU. You can contact EDPO regarding matters pertaining to the GDPR:

UK General Data Protection Regulation (GDPR) - UK Representative

Pursuant to Article 27 of the UK GDPR, Upwork has appointed EDPO UK Ltd as its UK GDPR representative in the UK. You can contact EDPO UK regarding matters pertaining to the UK GDPR:

FADP Article 14 Representative

Pursuant to Article 14 of the FADP, Upwork has appointed EDPO Switzerland as its Representative in Switzerland. You can contact EDPO Switzerland regarding matters pertaining to the FADP:

9. Complaints and Supervisory Authorities

In addition to any rights described in the Applicant Privacy Notice, you have the right to file a complaint with your local data protection authority if you believe your personal information has been mishandled. A list of European data protection authorities is available through the European Data Protection Board and relevant national regulators