8 Total
2 High severity
6 Medium severity
0 Low severity
Summary

This is Coursera's privacy policy explaining how the online learning platform collects and uses your personal data, including your name, email, payment details, course progress, quiz scores, and browsing behavior. The most important thing to know is that Coursera shares your learning activity and personal data with universities and companies whose courses you take, and those third parties may have their own privacy policies that apply to your data. You can exercise rights to access, correct, delete, or download your personal data by visiting your account settings or contacting privacy@coursera.org.

Technical Summary

This document is Coursera's Privacy Notice governing the collection, use, and disclosure of personal data from users of Coursera's online learning platform, with legal bases including consent, legitimate interests, and contractual necessity under applicable frameworks including GDPR and CCPA. The most significant obligations include Coursera's collection of a broad range of data — including identity, payment, usage, learning activity, and inferred profile data — combined with its obligation to provide users data subject rights such as access, correction, deletion, and portability. Notable provisions include sharing personal data with university and enterprise partners (Content Providers and Campuses) who may independently process learner data, and the use of personal data to build learner profiles for personalization and marketing; the scope of third-party sharing with institutional partners may exceed reasonable consumer expectation in an educational context. The policy engages GDPR (EU/EEA users), UK GDPR, CCPA/CPRA (California residents), and FERPA (student records in institutional contexts), with Coursera acting as both data controller and, in enterprise/campus contexts, potentially as a data processor on behalf of institutional clients. Material compliance considerations include ensuring adequate GDPR Art. 6 legal bases for all processing activities, maintaining valid SCCs or equivalent transfer mechanisms for international data transfers, and assessing whether institutional data sharing arrangements require additional FERPA-compliant data use agreements.

Evidence Provenance
Captured April 19, 2026 06:12 UTC
Document ID CA-D-000158
Version ID CA-V-000712
Wayback Machine View archived versions →
SHA-256 78568696f73d2ee395e10abd93f0fdfe20e26f39f6538b763db084aa70ad39d2
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Cryptographically signed
Institutional Analysis

🔒 Institutional analysis locked

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Upgrade to Professional — $149/mo
Change Timeline
View full version history (0 captures) →
Analyzed Changes

1 change analyzed since monitoring began.

What changed Coursera updated their Coursera Privacy Notice on April 19, 2026. Change detected: 1 sentence(s) modified. Document contained 235 sentences after update.
Consumer impact Coursera has added a 'Do Not Sell/Share' link in its site footer, making it easier for users to opt out of the sale or sharing of their personal data. This is particularly significant for California residents, who have a legal right under the CCPA/CPRA to prevent their data from being sold or shared with third parties. You can exercise this right by clicking the 'Do Not Sell/Share' link in the footer of Coursera's website.
Why it matters The addition of a 'Do Not Sell/Share' link gives all Coursera users — especially California residents — a direct, accessible way to opt out of data sale or sharing. This strengthens user privacy rights and reflects Coursera's compliance with CCPA/CPRA opt-out requirements.

Recent Clause-Level Changes Apr 19, 2026

8 provisions unchanged.

View full change record →
High Severity — 2 provisions
Medium Severity — 6 provisions

Cross-platform context

See how other platforms handle Enterprise and Campus Employer Data Disclosure and similar clauses.

Compare across platforms →

Applicable Regulations

EU AI Act
European Union
CCPA/CPRA
California, USA
CFAA
United States Federal
CAN-SPAM
United States Federal
GDPR
European Union
UK GDPR
United Kingdom