7 Total
4 High severity
3 Medium severity
0 Low severity
Summary

This is Chegg's privacy policy — it explains what personal information Chegg collects from students using its tutoring, homework help, and textbook services, including your academic activity, device data, location, and browsing behavior. The most important thing to know is that Chegg shares your personal data with third-party business partners and can transfer all your data to a new owner if Chegg is sold or merges with another company, without requiring your re-consent. If you are a California resident or the parent of a child using Chegg, you have specific rights to request deletion of your data or opt out of certain data sales by contacting Chegg's privacy team at privacy@chegg.com.

Technical Summary

This document is Chegg's Privacy Policy governing the collection, use, sharing, and retention of personal data from users of Chegg's educational services platform, operating under a consent and legitimate interest legal basis with references to CCPA, GDPR, FERPA, and COPPA compliance frameworks. The policy creates obligations for Chegg to respond to data subject requests (access, deletion, correction, portability) and imposes on users broad consent to data collection including academic usage data, device identifiers, location, behavioral data, and third-party data enrichment. A notably expansive provision permits Chegg to share personal data with 'service providers, business partners, and affiliates' without explicit enumeration of those partners, and the policy reserves the right to share data in connection with a business sale or merger, which could transfer student educational records to unknown third parties. The policy engages CCPA/CPRA (California Civil Code §1798.100 et seq.), COPPA (15 U.S.C. §6501), FERPA (20 U.S.C. §1232g), and GDPR (particularly Arts. 6, 13, 17), with the FTC and state attorneys general as primary enforcement authorities; material compliance considerations include the platform's reach to minors and student populations, the adequacy of consent mechanisms for users under 13, and the sufficiency of FERPA-compliant data sharing disclosures.

Evidence Provenance
Captured March 24, 2026 06:03 UTC
Document ID CA-D-000395
Version ID CA-V-000288
Wayback Machine View archived versions →
SHA-256 1bcbb6116dca5ab0b94f40e31ca469e12bfc12eda6fd35db82a8e9691bba3ae6
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Cryptographically signed
Institutional Analysis

🔒 Institutional analysis locked

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Upgrade to Professional — $149/mo
Change Timeline
View full version history (0 captures) →
High Severity — 4 provisions
Medium Severity — 3 provisions

Cross-platform context

See how other platforms handle CCPA/CPRA Consumer Rights (Access, Deletion, Correction, Opt-Out) and similar clauses.

Compare across platforms →

Applicable Regulations

CCPA/CPRA
California, USA
CFAA
United States Federal
CAN-SPAM
United States Federal
GDPR
European Union