Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
International users acknowledge that their personal information and user-generated content will be transferred to and processed in the United States, where data protection standards may differ from those in their home jurisdiction. Khan Academy characterizes the transfer as necessary for service delivery.
This analysis describes what Khan Academy's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision discloses cross-border data transfers to the United States for all international users. For EU and UK users, such transfers require a valid legal transfer mechanism under GDPR and the UK GDPR, such as standard contractual clauses or an adequacy decision; the document does not specify which mechanism Khan Academy relies upon.
Interpretive note: The legal transfer mechanism for EU and UK user data is not specified in the Terms of Service; compliance with GDPR Chapter V transfer requirements depends on mechanisms disclosed in the Privacy Policy or supplemental institutional agreements.
Under this clause, international users acknowledge and consent to the transfer of their personal information and user-generated content to the United States for processing. The document does not specify the legal transfer mechanism used for EU or UK user data, which may be addressed in the Privacy Policy.
Cross-platform context
See how other platforms handle International User Data Processing Acknowledgment and similar clauses.
Compare across platforms →Monitoring
Khan Academy has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"Khan Academy operates the Services in the United States. If you access our Services from outside the United States, you acknowledge and agree that your information, including your personal information and user-generated content, will be collected, transferred, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. This transfer is necessary to provide the Services to you in accordance with our Terms of Service.Excerpt from Khan Academy's Terms of Service
1) REGULATORY LANDSCAPE: Cross-border data transfers from the EU and UK to the United States are regulated under GDPR Chapter V and UK GDPR, enforced by EU member state data protection authorities and the UK Information Commissioner's Office. The document does not specify the legal transfer mechanism (standard contractual clauses, adequacy decision, or other) relied upon for EU and UK user data. This provision may require evaluation against GDPR transfer requirements. 2) GOVERNANCE EXPOSURE: Medium. The provision's reliance on user acknowledgment as a transfer consent mechanism may not satisfy GDPR's requirements for international transfers, as GDPR generally requires specific transfer mechanisms rather than contractual consent for routine data exports. The Privacy Policy may specify the applicable mechanism. 3) JURISDICTION FLAGS: EU/EEA and UK users have heightened exposure. Australian Privacy Act requirements for cross-border disclosures may also be implicated. Institutions deploying Khan Academy for international school use should assess whether data transfer mechanisms are documented and adequate for their jurisdiction. 4) CONTRACT AND VENDOR IMPLICATIONS: Institutions in EU/EEA or UK jurisdictions should confirm whether a data processing addendum specifying GDPR-compliant transfer mechanisms is available from Khan Academy, either through District Agreements or supplemental institutional agreements. 5) COMPLIANCE CONSIDERATIONS: Legal teams serving EU, UK, or Australian institutional users should review Khan Academy's Privacy Policy and any applicable data processing addenda to confirm the legal basis for cross-border transfers. If standard contractual clauses are relied upon, institutions should confirm they have been executed and that transfer impact assessments have been conducted where required.
Regulatory citations, enforcement risk, and due diligence action items.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
This provision discloses cross-border data transfers to the United States for all international users. For EU and UK users, such transfers require a valid legal transfer mechanism under GDPR and the UK GDPR, such as standard contractual clauses or an adequacy decision; the document does not specify which mechanism Khan Academy relies upon.
Under this clause, international users acknowledge and consent to the transfer of their personal information and user-generated content to the United States for processing. The document does not specify the legal transfer mechanism used for EU or UK user data, which may be addressed in the Privacy Policy.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Khan Academy.