This analysis describes what Coursera's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The clause establishes a hard maximum retention period of two years for biometric facial data, a particularly sensitive category of personal data.
The updated policy discloses that Coursera collects business contact data (name, job title, company, business email, business phone) from third-party commercial sources, employers, and public sources for marketing purposes. The policy also clarifies that voice-enabled messaging features may record and transcribe audio inputs into text. Additionally, the policy now authorizes marketing of Coursera affiliate products (including Udemy) to existing and prospective customers, content providers, partners, and instructors. You can opt out of marketing communications by using the unsubscribe mechanism in any marketing email or by changing your email preferences in your account settings.
View change record →The updated privacy notice now explicitly discloses that voice-enabled features on the platform transcribe audio inputs into text, and that users should not include unnecessary personal data or sensitive information in free-text or voice communications. The revised terms also clarify that personal data may be shared with Coursera's affiliates and subsidiaries in addition to third-party partners, and that voice and text communications are processed for service delivery and personalization purposes. You can review the updated privacy notice to understand which voice features are available and adjust your communication practices accordingly.
View change record →Your biometric facial data will not be retained by Coursera beyond the earlier of successful verification completion or two years.
How other platforms handle this
We will promptly destroy personal information at the end of the retention period, as described above. When we destroy personal information, we do so in a way that prevents that information from being restored or reconstructed.
we will delete your account data after three years of inactivity.
We may continue to retain some information even after you delete your account if we are required to do so in order to comply with applicable laws.
"biometric facial data...is destroyed upon successful completion of verification and in no event after 2 years.Excerpt from Coursera's Privacy Notice
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
The clause establishes a hard maximum retention period of two years for biometric facial data, a particularly sensitive category of personal data.
Your biometric facial data will not be retained by Coursera beyond the earlier of successful verification completion or two years.
ConductAtlas has identified this type of provision across 267 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Coursera.