Business Transfer Data Sharing

What it is

If Skillshare is sold, merged, or restructured, your personal data will be transferred to the new owner, subject only to a commitment that they will treat it consistently with this policy.

Why it matters (compliance & governance perspective)

This provision permits the transfer of your personal data to an entirely different company in a corporate transaction, with the only protection being a general consistency commitment rather than specific contractual obligations or user notification requirements.

Consumer impact (what this means for users)

In the event of a sale or merger, your complete personal data profile, including learning history, payment information, and inferred interests, may be transferred to a new corporate owner, and you will have limited ability to prevent or opt out of that transfer.

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: Under GDPR, personal data transfers in the context of mergers and acquisitions require a valid legal basis and, where the acquiring entity is in a third country, adequate transfer mechanisms. CCPA requires that businesses disclose business transfers as a category of disclosure and may require notice to California consumers. The FTC has historically scrutinized data asset transfers in bankruptcy and M&A contexts where privacy commitments are not adequately maintained. Relevant enforcement authorities include the FTC, California Privacy Protection Agency, and EU/EEA data protection authorities. GOVERNANCE EXPOSURE: Medium. The provision conditions the transfer only on the receiving party agreeing to treat data consistently with this Privacy Policy, which is a relatively low contractual bar compared to requiring the receiving party to assume all existing legal obligations or notify affected users. The recent Superpeer acquisition, referenced at the top of this policy, illustrates that this provision is operationally active rather than theoretical. JURISDICTION FLAGS: EU/EEA users face heightened exposure if a business transfer results in data being processed by an entity in a country lacking EU adequacy status, potentially requiring new transfer mechanism documentation. California residents may have CCPA rights to know about the transfer. The policy does not specify whether users will receive advance notice of a business transfer. CONTRACT AND VENDOR IMPLICATIONS: Due diligence teams reviewing Skillshare as a vendor or in an M&A context should confirm whether existing user data processing agreements and privacy commitments survive a change of control, and whether the acquiring entity would be bound by the same or equivalent privacy standards. The absence of a user notification commitment pre- or post-transfer is a notable gap. COMPLIANCE CONSIDERATIONS: Legal teams should assess whether this provision's consistency commitment constitutes a legally enforceable obligation on acquiring parties across relevant jurisdictions, and should review whether any notification to users is required under applicable law prior to or following a business transfer. Data processing agreements with sub-processors should include change-of-control provisions that maintain processing standards.

Applicable agencies

Applicable regulations

Provision details

Other risks in this policy

• Session Replay Consent Embedded in Policy Acceptance medium
• Third-Party Demographic Inference Attribution medium
• Teacher Access to Student Data medium
• Legitimate Interests Processing Basis medium
• Data Retention Policy low
• Children's Information and Age Restriction medium

Related Analysis

• Meta Removed 438 Sentences From Its Privacy Policy. Here Is What Disappeared.

  ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.

• 23andMe Is Bankrupt. What Happens to Your DNA Now?

  Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.