Khan Academy · Khan Academy Privacy Policy · View original document ↗

School and District Administrator Access to Student Data

Medium severity High confidence Explicitdocumentlanguage Unique · 0 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Khan Academy Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

If your school uses Khan Academy, school administrators and teachers assigned to your account can see your full learning history, progress, and activity on the platform.

This analysis describes what Khan Academy's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Student data in school-deployed accounts is accessible to institutional administrators beyond just the assigned teacher, which expands the audience for sensitive academic performance data without additional student or parental consent.

Consumer impact (what this means for users)

Students using Khan Academy through a school account should be aware that their complete learning activity, including performance on individual exercises, is visible to school district administrators and not just their assigned teacher.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Export Your Data
    Email privacy@khanacademy.org to request a copy of your student data or your child's student data, including records of who has accessed the account.

How other platforms handle this

Ledger Medium

At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.

Garmin Medium

If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to access, correct, or erase your personal data; the right to restrict or object to our processing of your personal data; the right to data portability; and, where our processing is based on your...

Strava Medium

We use information to enhance the quality, reliability, and/or accuracy of our AI Features by creating, developing, training, testing, improving, and maintaining AI and ML models run by Strava or our service providers. We use aggregated, de-identified data for this purpose. We also use personal info...

See all platforms with this clause type →

Monitoring

Khan Academy has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
If you are a student or teacher and your school or district has signed up for Khan Academy, your school or district's administrators may be able to view information about your use of Khan Academy. If you are a student, this includes information about your learning progress and activity. Khan Academy may also share your information with your school or district in connection with your use of our Service.

— Excerpt from Khan Academy's Khan Academy Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: This provision directly engages FERPA, under which Khan Academy acts as a school official with legitimate educational interest when processing student data on behalf of an institution. The school or district retains primary accountability for student education records. The Department of Education's Student Privacy Policy Office is the enforcement authority. State student privacy laws in California (SOPIPA), New York, and others impose additional constraints on how student data may be used by service providers. GOVERNANCE EXPOSURE: High. The extension of data access to district-level administrators creates a broad institutional access footprint for student behavioral data. Compliance teams must assess whether data processing agreements adequately limit administrator access to legitimate educational purposes and prohibit commercial use of accessed data. JURISDICTION FLAGS: California's SOPIPA and similar state laws prohibit service providers from using student data for purposes other than those specified in the contract with the school. EU and UK school deployments would require GDPR-compliant data processing agreements including processor obligations under GDPR Article 28. Illinois and New York impose specific breach notification requirements for student data. CONTRACT AND VENDOR IMPLICATIONS: Procurement teams should ensure the data processing agreement with Khan Academy specifies which categories of school personnel have access, under what conditions, and for what purposes. Audit rights provisions are advisable. The agreement should address what happens to student data upon contract termination. COMPLIANCE CONSIDERATIONS: Institutions should notify parents or guardians of the scope of administrator access to student data as part of their annual FERPA notification obligations. Data governance policies should specify the legitimate educational purpose standard for administrator access to Khan Academy student records.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Monitor free for 14 days

Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.

Applicable agencies

  • Doe
    Student data accessible to school district administrators constitutes education records under FERPA, and the Department of Education's Student Privacy Policy Office handles FERPA complaints
    File a complaint →

Applicable regulations

EU AI Act
European Union
CCPA/CPRA
California, USA
COPPA
United States Federal
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Khan Academy Privacy Policy
Entity
Khan Academy
Document last updated
May 5, 2026
Tracking information
First tracked
April 18, 2026
Last verified
May 11, 2026
Record ID
CA-P-010269
Document ID
CA-D-00160
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
67ea8f65d5844645bdb037fbe185b7686e95e08c03fd69c0908a9f7825918090
Analysis generated
April 18, 2026 10:26 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Khan Academy
Document: Khan Academy Privacy Policy
Record ID: CA-P-010269
Captured: 2026-04-18 10:26:27 UTC
SHA-256: 67ea8f65d5844645…
URL: https://conductatlas.com/platform/khan-academy/khan-academy-privacy-policy/school-and-district-administrator-access-to-student-data/
Accessed: June 28, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Khan Academy's School and District Administrator Access to Student Data clause do?

Student data in school-deployed accounts is accessible to institutional administrators beyond just the assigned teacher, which expands the audience for sensitive academic performance data without additional student or parental consent.

How does this clause affect you?

Students using Khan Academy through a school account should be aware that their complete learning activity, including performance on individual exercises, is visible to school district administrators and not just their assigned teacher.

Is ConductAtlas affiliated with Khan Academy?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Khan Academy.