8 Total
1 High severity
5 Medium severity
2 Low severity
Summary

Coursera's Privacy Notice describes how the platform collects and uses personal data from learners, instructors, and visitors, including name, contact details, payment information, course enrollment and completion data, assessment results, and device and usage information. The terms authorize sharing learner activity data, including course progress and completion status, with Content Providers (the universities and companies whose courses users take) and with enterprise or campus customers who have sponsored a user's access, meaning institutional sponsors may receive information about individual learner activity. The policy also states that Coursera uses personal data for marketing and advertising purposes and may share data with third-party advertising and analytics partners, with opt-out mechanisms available for certain uses.

Technical / Legal Breakdown

This document is Coursera's Privacy Notice, governing the collection, use, storage, and disclosure of personal data for users of the Coursera online learning platform, with stated legal bases including consent, contractual necessity, and legitimate interests depending on jurisdiction. The policy states that Coursera collects identifiers, contact information, payment data, demographic information, educational history, learning activity and performance data, device and browser information, location data, and communications content; the terms authorize sharing this data with Content Providers (universities and companies offering courses), enterprise customers, business partners, service providers, and in certain contexts, advertising and analytics partners. The policy discloses that learning activity, course performance, and profile information may be shared with Content Providers and enterprise or campus customers without a separate opt-in, which is operationally significant for users enrolled through institutional arrangements, as the agreement states that employers or educational institutions sponsoring access may receive information about learner activity and completion. The policy references GDPR applicability for EEA users, CCPA/CPRA rights for California residents, and FERPA considerations for student records in institutional contexts, with the document stating specific rights frameworks apply depending on the user's jurisdiction. Enterprise and campus license arrangements create layered data-sharing obligations that may require evaluation under both FERPA and GDPR depending on institutional geography and user population.

Institutional Analysis

Institutional analysis available with Compliance

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Compliance.

Start Compliance free trial

6 important changes detected

6 versions captured · Last updated: May 2026

What changed Coursera's Privacy Notice footer was updated on May 11, 2026 to include a new link labeled 'Do Not Sell/Share' in the footer navigation. This addition appeared between the 'Modern Slavery Statement' link and the 'Learn Anywhere' section. The change makes a consumer rights mechanism more prominent at the page level, though the underlying policy language and operational effect of this mechanism are not detailed in the change summary provided.
Why this matters Coursera added a 'Do Not Sell/Share' link to the footer of its Privacy Notice, making this consumer opt-out mechanism more accessible at the page level. The updated footer now includes this link alongside other legal and compliance resources. The change itself does not modify the underlying data practices or privacy rights, but rather makes an existing or newly available opt-out mechanism more visible to users.
View full change record →

May 11, 2026

medium
What changed Coursera updated its Privacy Notice on May 11, 2026 to clarify data collection and processing practices. The updated language expands descriptions of third-party data sources (now explicitly naming affiliates and business partners), adds detail about voice-enabled communications features and audio transcription capabilities, and broadens language describing AI-driven personalization and chatbot applications. The policy now explicitly mentions processing communications via text and voice, and clarifies that data may be shared with entities that become affiliates or subsidiaries during business transitions.
Why this matters The updated terms now explicitly disclose that Coursera processes communications through voice-enabled features that transcribe audio into text, and clarify that personal data may be shared with third parties including affiliates and business partners. The policy expands descriptions of AI-driven personalization and chatbot applications that use your learning and interaction data. The terms establish that data may be transferred to entities that become Coursera affiliates or subsidiaries during business transitions. You should review the updated guidance that cautions against including unnecessary or sensitive personal data in the platform's free-text and voice-enabled communication features.
View full change record →

May 7, 2026 low

Coursera's Privacy Notice footer was updated on May 7, 2026 to add a 'Cookies Preference Center' link. This change makes it easier for users to manage their cookie preferences directly …

View change record →
May 6, 2026 low

Coursera updated its Privacy Notice on May 6, 2026 to clarify that the main privacy policy does not cover the Ollie mobile application. Two new sentences were added directing Ollie …

View change record →
April 19, 2026 low

Coursera's privacy notice footer was updated on April 19, 2026 to add a link labeled 'Do Not Sell/Share' in the footer navigation. This link appears to relate to consumer privacy …

View change record →
April 18, 2026 medium

Coursera removed two sentences from its Privacy Notice that previously stated the policy did not apply to its Ollie mobile application and directed users to a separate Ollie Privacy Notice. …

View change record →
High — 1 provision
Medium — 5 provisions
Low — 2 provisions

Monitoring

Coursera has updated this document before.

Monitor includes same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →

Compliance Governance Intelligence

Need provision-level monitoring and regulatory mapping?

Compliance includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.

Start Compliance free trial

Cross-platform context

See how other platforms handle Enterprise Administrator Access to Learner Data and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
UK GDPR
United Kingdom
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured May 11, 2026 17:46 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000158
Version ID CA-V-002436
SHA-256 55aa6fed8cf51c41c9a7e872942936e06b525041f62b114eea38ab4d8301dabc
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.

Create free account Compare plans