Workday

Overview

Workday is a major enterprise platform for human capital management (HCM), financial planning, and talent acquisition. On public-facing websites, Workday's presence is almost exclusively through its recruiting and careers module — embedded job listing pages and application forms that companies use for their careers sections. These widgets handle candidate applications, resume uploads, and job search functionality. Workday's career site widgets are deployed by thousands of enterprise employers, making them one of the most common embedded third-party application flows on corporate websites.

What This Script Does

Workday's career site integration typically loads via an iframe or embedded application from *.myworkdayjobs.com or *.wd5.myworkdaysite.com subdomains.

Functionality:

• Renders searchable job listing pages with filters for location, department, and job type
• Handles the full application workflow: personal information, resume upload, questionnaire responses
• Supports candidate account creation and returning applicant login
• Provides job alert subscription functionality

Cookies set:

• PLAY_SESSION — session cookie maintaining the candidate's application state during the submission process
• wd-browser-id — persistent cookie identifying the browser for returning applicant recognition
• Session cookies for maintaining search filters and pagination state across job listing pages
• Authentication cookies scoped to the Workday domain for logged-in candidate sessions

Data collected:

• Candidate personal information (name, email, phone, address) provided through application forms
• Resume and cover letter file uploads
• Application questionnaire responses (work authorization, veteran status, demographic data for EEO compliance)
• Job search behavior (search terms, filters applied, jobs viewed)

The application forms collect sensitive personal data including optional demographic information for equal employment opportunity (EEO) reporting, which is governed by specific employment regulations in addition to general data protection laws.

Consent & Compliance

Workday's career page widgets fall under the functional consent category. Under GDPR, the session cookies supporting the application process are considered strictly necessary for a service requested by the user (submitting a job application). The persistent browser identification cookie enables returning applicant convenience but is not strictly necessary.

The personal data collected through application forms is processed under a legitimate interest or contract performance legal basis (Article 6(1)(b) GDPR) for employment purposes, subject to additional protections under Article 88 for employee/candidate data.

Under CCPA/CPRA, job applicant data has specific protections under the CPRA's employee and applicant data provisions. Workday should be disclosed as a data processor in the privacy policy.

Should You Block This Without Consent?

No. Workday's career page widgets serve a functional purpose — enabling job applications that candidates explicitly initiate. The session cookies are necessary for the application workflow, and the personal data collected is user-provided for a specific purpose. Blocking these widgets would prevent candidates from applying for jobs. Disclosure in the privacy policy is sufficient.