By Stephanie Morgan, business reporter covering payroll technology and workplace privacy
Last reviewed: July 29, 2026
Trion Solutions’ Worksite Employee Privacy Policy, dated February 21, 2024, says the company collects personal information both online and offline while providing PEO services to employees of its client businesses. That data can extend far beyond a name and mailing address because payroll, tax, benefits and employment administration require financial, government-identification and work-history records.
The policy is important for a structural reason. A worker may never have applied for a job at Trion or entered its Troy office, yet Trion can still hold employment information because it acts as the administrative employer for the worker’s actual workplace.
That makes Trion part of the employee-data chain, not merely a payroll website.
Why Trion has employee data in the first place
Trion is a professional employer organization that handles payroll and taxes, benefits administration, workers’ compensation and regulatory compliance for client companies. Its FAQ says it processes payroll and manages HR functions for tens of thousands of client worksite employees across nearly every state.
A worksite employee generally performs daily work for the client business. Trion handles designated administrative-employer functions.
That arrangement can place several organizations around one employee record:
| Organization | Typical data role |
|---|---|
| Client employer | Creates schedules, pay rates, job assignments and personnel decisions |
| Trion Solutions | Processes payroll, taxes, benefits and administrative employment records |
| PrismHR or another technology provider | Hosts or processes parts of the HRIS workflow |
| Insurance and benefit providers | Receive enrollment, eligibility or claim information |
| Government agencies | Receive tax, wage and employment filings |
| Financial institution or paycard provider | Receives payment instructions |
The exact flow depends on the client’s services and the employee’s circumstances.
Trion’s privacy policy confirms that its collection is not limited to information entered on a public website. It covers personal information collected in connection with the PEO relationship, including offline records.
The distinction is substantial. A person can avoid Trion’s marketing site and still have data processed within Trion’s employment systems.
What kinds of information can payroll administration require?
Trion’s public payroll page describes direct deposit, paycards, check processing, tax filing, time-and-attendance interfaces, union reporting and custom payroll reports. It also says employees can access check stubs and W-2 forms through its online platform.
Those functions imply several categories of information:
- Identity and contact records
- Social Security or taxpayer-identification information
- Wage and salary data
- Hours worked and attendance records
- Tax elections and withholding
- Bank or paycard instructions
- Benefit deductions
- Paid-time-off balances
- Job, department and location data
- Workers’ compensation information
- Union-related payroll records where applicable
The specific categories and purposes should be read from Trion’s current privacy notice rather than inferred solely from service descriptions. The operational connection remains clear: each payroll feature requires an underlying employee record.
Direct deposit requires account-routing instructions. Tax filing requires wage and withholding data. Benefits administration requires enrollment and deduction information. Timekeeping can create detailed records of when and where work was performed.
One service creates many data points.
Trion maintains two different privacy policies
Trion publishes an online privacy policy for website visitors and a separate worksite-employee privacy policy.
The website policy, dated December 19, 2019, covers people who visit or interact with Trion’s public website. It lists contact information, internet activity and IP-address-based geolocation among the information collected. The policy states that Trion does not sell personal information collected from site visitors.
The 2024 worksite policy has a different audience. It addresses personal information collected about employees while Trion provides PEO services.
| Policy | Covered person | Main context |
| Online Privacy Policy, December 19, 2019 | Public website visitor | Browsing, cookies and contact forms |
| Worksite Employee Privacy Policy, February 21, 2024 | Employee of a Trion client | Payroll, benefits and employment administration |
The policies should not be substituted for one another.
A statement that website contact information is not shared with third parties does not prove that payroll information remains solely within Trion. PEO services necessarily involve disclosures to tax agencies, banks, insurers, benefit providers and other parties when required to deliver the service.
The employee policy is therefore the more relevant document for anyone receiving a Trion paycheck or W-2.
California law explains the 2024 employee notice
The California Consumer Privacy Act and California Privacy Rights Act now apply to covered businesses’ handling of employee personal information. The California Attorney General states that the expanded protections affecting employee data took effect on January 1, 2023.
California’s privacy framework gives covered individuals rights that can include:
- Knowing what personal information is collected
- Knowing how the information is used and disclosed
- Requesting deletion, subject to exceptions
- Correcting inaccurate personal information
- Opting out of sale or sharing
- Limiting certain uses of sensitive personal information
- Receiving equal treatment after exercising privacy rights
The California Privacy Protection Agency’s CCPA text effective January 1, 2026 expressly defines employment-related information and says collecting it to administer employment benefits is considered a business purpose.
That point fits Trion’s operating model directly.
A PEO can collect sensitive employment information for legitimate payroll and benefit purposes without that collection being optional in the ordinary sense. An employer cannot calculate wages or file taxes without identifying the worker and the compensation involved.
Privacy law does not eliminate the record. It regulates collection, use, disclosure, protection and individual rights around it.
Sensitive information is central to PEO work
California identifies information such as Social Security numbers, financial-account data and precise geolocation as sensitive personal information.
Payroll providers routinely work near at least two of those categories.
A Social Security number may be required for wage and tax reporting. Financial-account details may be used for direct deposit. Some time-and-attendance systems can create location or device records depending on how the client configures them.
Trion’s payroll page says its timekeeping options can include web portals, mobile applications, physical clocks, facial-recognition compatibility and temperature-scanning equipment.
That statement describes available technology, not proof that every Trion client uses facial recognition or temperature scanning.
The qualification matters.
A client using a basic physical time clock does not create the same privacy profile as one using biometric identification or a mobile application. Available functionality and active deployment are different facts.
Trion does not publish the number of clients using each method.
The client may supply much of the information
PEO data does not originate entirely with Trion.
The client employer may provide:
- Employee names and addresses
- Pay rates
- Time records
- Job classifications
- Benefit eligibility
- Disciplinary or leave information
- Termination dates
- Workplace-injury reports
The employee may provide tax elections, direct-deposit instructions, beneficiary information or benefit selections. Other data can come from insurers, government agencies and technology systems.
This distributed collection affects accuracy.
Trion can process the information correctly while starting with an incorrect client record. A manager might report the wrong number of hours, use an outdated pay rate or assign the employee to the wrong state.
California gives covered individuals a right to request correction of inaccurate personal information.
The operational question is who can actually correct each field.
Trion may control the payroll system, while the client controls the underlying employment decision. Correcting a misspelled name may be straightforward. Challenging a pay rate, termination date or hours-worked record may require both organizations.
The data has one subject but several owners of the process.
Deletion rights have payroll exceptions
California’s right to delete is not absolute. The state’s guidance says businesses may retain information when an exception applies, including circumstances in which the business is legally required to keep it.
Employment records frequently fall into that category.
Payroll and tax information may need to be retained for legal, accounting, audit, benefits or dispute purposes. A former employee generally cannot expect every wage and tax record to disappear immediately after requesting deletion.
This is where privacy-policy language can sound broader than the practical result.
A person may have a valid right to submit a deletion request. Trion may also have a valid reason to deny all or part of it because the record supports tax filing, legal compliance or another permitted purpose.
The response should identify the applicable exception.
Trion’s publicly indexed employee policy does not provide a simple universal retention period for every category of worksite-employee information.
That omission is significant because payroll, benefit and claim records may follow different schedules.
The policy does not reveal a full retention timetable
A strong employee privacy disclosure would map each data category to a retention standard.
For example:
| Record category | Reason retention may differ |
| Payroll history | Tax, wage and accounting obligations |
| Direct-deposit details | Payment operations and fraud review |
| Benefit enrollment | Coverage, eligibility and claim disputes |
| Workers’ compensation | Long-running medical and legal claims |
| Time records | Wage-and-hour compliance |
| Job applications | Hiring and discrimination records |
| Website logs | Security and system administration |
Trion’s current public materials do not present this complete category-by-category timetable.
The absence does not mean Trion keeps information indefinitely. It means an outside reader cannot determine the exact duration from the reviewed public pages.
“Retained as necessary” can cover very different periods depending on the record.
A workers’ compensation claim may remain active for years. A failed login record may need far less time. A tax record can outlive an employee’s portal access.
Public disclosure would be more useful if it separated those categories.
PrismHR adds another processing layer
Trion’s employee portal allows users to sign in through the Trion HRIS environment or with a PrismONE ID.
This means employee data may be processed through technology operated or supported by an outside platform provider.
Using a vendor does not automatically mean Trion sells the information. Service providers commonly process information under contracts for defined business purposes.
It does mean data governance extends beyond one company.
Relevant questions include:
- Which system stores the authoritative employee record?
- Which party controls access permissions?
- How are accounts disabled after termination?
- Which integrations receive payroll or benefit data?
- How are vendor incidents communicated?
- What information remains after a client leaves Trion?
- Which subcontractors or subservice organizations participate?
Trion’s public website does not answer all of those questions.
A portal privacy link provides notice, but it is not a complete system architecture.
Payroll cybersecurity has a distinct federal framework
The National Institute of Standards and Technology publishes a Cybersecurity Framework Payroll Profile intended to help payroll organizations improve cybersecurity, prevent fraud and protect privacy.
The profile treats payroll as a specialized security environment rather than generic office administration.
That is justified by the concentration of valuable information. Payroll systems combine identity records, compensation, payment instructions and tax data. An attacker who changes a direct-deposit account may divert wages without needing to steal every file.
Security controls therefore need to address more than confidentiality.
They also need to protect:
- Accuracy of payroll instructions
- Authorization of changes
- Availability near payroll deadlines
- Detection of unusual account activity
- Recovery after a system failure
- Verification of employees and administrators
NIST’s broader Security and Privacy Controls for Information Systems and Organizations, Special Publication 800-53 Revision 5, describes controls designed to address hostile attacks, human errors, natural disasters, system failures and privacy risk.
These are federal practice frameworks, not evidence that Trion has implemented every listed control.
The distinction must remain explicit.
Trion’s marketing makes strong reliability claims
Trion’s payroll page says its combination of technology and human oversight produces accurate and on-time payroll and describes some services as error-free.
Those are commercial claims.
No reviewed Trion source publishes:
- A verified payroll-error rate
- Portal uptime
- Number of security incidents
- Average time to detect an incident
- Direct-deposit fraud losses
- Access-review results
- Privacy-request response statistics
- Percentage of terminated accounts disabled on time
The absence of metrics does not prove a privacy or security failure.
It limits what the public can verify.
A privacy policy confirms categories, purposes and rights. It does not independently demonstrate that every control operates effectively.
Policy is evidence of governance intent. Performance requires another source.
No public breach conclusion should be invented
The reviewed sources did not establish a confirmed, publicly documented Trion data breach affecting worksite employees.
That sentence has to remain narrow.
It does not prove that no incident, attempted intrusion, internal error or client-side compromise has ever occurred. Private security events may not appear in ordinary search results, and breach notices can be filed under a subsidiary or vendor name.
It would be equally unsupported to imply that Trion suffered a breach merely because it stores sensitive payroll data.
Risk and event are not synonyms.
The responsible report states what the company collects, what the policies disclose and which performance facts remain unavailable.
Where the privacy headline misleads
A website statement that Trion does not sell visitor information can sound like a complete description of company-wide data use. It is not.
The statement appears in the website privacy policy, which covers public visitors.
Worksite-employee information operates in another context. It may need to be disclosed to service providers, banks, insurers, benefit administrators, auditors, legal advisers and government agencies to perform payroll and employment functions.
Disclosure is not automatically sale.
Another misleading shortcut is treating a deletion right as an immediate right to erase every payroll record. California explicitly recognizes exceptions, including legal retention obligations.
A third error is assuming every available timekeeping feature is active for every employee. Trion lists facial-recognition and temperature-scanning compatibility, but it does not publish adoption data.
The evidence supports capability, not universal use.
What remains undisclosed
Trion’s policies provide a useful baseline, but several material details remain outside the reviewed public record:
- Exact retention periods by employee-data category
- Number of privacy requests received annually
- Percentage of requests granted or denied
- Current list of major employee-data subprocessors
- Number and type of security incidents
- Frequency of employee-access reviews
- Adoption of biometric timekeeping across clients
- Post-termination account-disablement results
- Encryption and authentication standards used for each system
- Independent privacy-control testing results
Some of this information may be confidential for security or contractual reasons.
Its absence still affects public verifiability.
A worker can see that Trion has a privacy framework. The worker cannot reconstruct the complete data lifecycle from the public documents alone.
Frequently asked questions
Why does Trion Solutions have my personal information?
Trion may process personal information because it provides payroll, tax, benefits or other HR administration to the company where the person works. Trion says it acts as the administrative employer for client companies and may issue paychecks or W-2 forms to client employees.
What employee information can Trion process?
Its services can involve identity, wage, tax, bank-payment, benefit, timekeeping and employment information. The exact categories depend on the client relationship and services used.
Does Trion sell personal information?
Trion’s website privacy policy states that it does not sell personal information collected from public website visitors. That statement should not be read as a complete description of disclosures required to deliver payroll and PEO services.
Can a California employee request their information?
Covered individuals can have rights to know, delete, correct, limit certain uses and receive nondiscriminatory treatment under the CCPA and CPRA, subject to the law’s requirements and exceptions.
Can every payroll record be deleted?
Not necessarily. California guidance says deletion rights are subject to exceptions, including when a business must retain information to meet a legal obligation.
Does Trion use PrismHR?
Trion’s HRIS portal supports sign-in through PrismONE, showing that PrismHR technology participates in the employee-service environment.
Does Trion use facial recognition?
Trion says its available timekeeping technology can be compatible with facial recognition and temperature scanning. The reviewed source does not state that every client or employee uses those features.
The strongest conclusion is specific: Trion publicly identifies a worksite-employee privacy framework and collects data necessary for payroll, benefits and administrative employment functions. The policies establish purpose and legal rights, but they do not publicly reveal a complete retention schedule, system map or measured security-performance record.