Coursera Privacy Notice

This document is Coursera's Privacy Notice, governing the collection, use, storage, and sharing of personal data for all users of Coursera's online learning platform, with legal bases including consent, contractual necessity, and legitimate interests as articulated under GDPR-aligned frameworks. The notice states that Coursera collects a broad range of personal data including identity information, educational progress, payment details, device and usage data, and communications content, and the terms authorize sharing this data with university and corporate partners, employers (where Coursera for Business or campus programs are used), service providers, advertising partners, and government authorities upon lawful request. Notably, the policy permits sharing learner performance and engagement data with institutional clients such as employers and universities, which represents a meaningful data flow that learners enrolled through organizational programs may not fully anticipate; the notice asserts broad retention and processing rights, though applicable law including GDPR and CCPA may impose limits on how these rights operate in practice. The notice engages GDPR for EU/EEA users, CCPA/CPRA for California residents, FERPA considerations for students enrolled through educational institutions, and COPPA given the platform's age restriction of 13 (or 16 in certain jurisdictions); compliance teams should note that Coursera's dual role as both a direct-to-consumer platform and a B2B education infrastructure provider creates layered data controller and processor obligations that vary by user type and institutional arrangement.