This analysis describes what Coursera's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes an open-ended retention standard based on operational and legal necessity without specifying maximum retention durations for most data categories, which may require evaluation under GDPR's storage limitation principle and comparable state law requirements.
Interpretive note: The policy does not enumerate specific retention periods for most data categories, making it difficult to assess compliance with GDPR storage limitation requirements without additional documentation from Coursera.
The updated terms now explicitly disclose that Coursera processes communications through voice-enabled features that transcribe audio into text, and clarify that personal data may be shared with third parties including affiliates and business partners. The policy expands descriptions of AI-driven personalization and chatbot applications that use your learning and interaction data. The terms establish that data may be transferred to entities that become Coursera affiliates or subsidiaries during business transitions. You should review the updated guidance that cautions against including unnecessary or sensitive personal data in the platform's free-text and voice-enabled communication features.
View change record →The updated Privacy Notice removes explicit language stating that the policy does not apply to Coursera's Ollie mobile application and no longer directs users to a separate Ollie Privacy Notice for that app. Previously, users of Ollie had clear notice to consult a dedicated privacy policy; that direction is now absent from the main Privacy Notice. The updated notice also narrows the scope of covered entities by removing 'affiliates' from the definition of Coursera, stating the policy now applies to Coursera, Inc., its subsidiaries, and international branches only. Users of the Ollie App should independently verify what privacy terms currently govern that application, as the main Coursera Privacy Notice no longer explicitly addresses Ollie coverage.
View change record →Under this clause, personal data including learner activity, assessment results, and account information may be retained for extended periods based on Coursera's operational and legal needs, without defined maximum retention windows for most categories. Users wishing to request deletion may do so through the privacy request portal.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
"We retain your personal data for as long as necessary to provide the Services and fulfill the transactions you have requested, or for other essential purposes such as complying with our legal obligations, maintaining business and financial records, resolving disputes, maintaining security, detecting and preventing fraud and abuse, and enforcing our agreements.Excerpt from Coursera's Privacy Notice
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes an open-ended retention standard based on operational and legal necessity without specifying maximum retention durations for most data categories, which may require evaluation under GDPR's storage limitation principle and comparable state law requirements.
Under this clause, personal data including learner activity, assessment results, and account information may be retained for extended periods based on Coursera's operational and legal needs, without defined maximum retention windows for most categories. Users wishing to request deletion may do so through the privacy request portal.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Coursera.