Skillshare · Skillshare Privacy Policy · View original document ↗

EU and UK User Rights Under GDPR

Medium severity Medium confidence Explicitdocumentlanguage Rare · 2 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity Skillshare recorded 2 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for Skillshare Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

The policy states that EU and UK residents have GDPR and UK GDPR data protection rights including access, correction, deletion, and restriction of processing, exercisable by contacting Skillshare at privacy@skillshare.com.

This analysis describes what Skillshare's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision establishes Skillshare's GDPR and UK GDPR compliance disclosure for EU and EEA and UK users, identifying the contact mechanism for exercising data subject rights; the phrase 'aims to take reasonable steps' is qualified language that does not unequivocally commit to specific statutory response timelines, which may warrant review against GDPR Article 12 requirements.

Interpretive note: The policy's qualified language regarding GDPR compliance obligations and the absence of a named EU representative or DPO in the available text creates interpretive uncertainty about whether all GDPR Article 27 and 37 requirements are met.

Consumer impact (what this means for users)

Under this provision, EU and UK users may request access to, correction of, deletion of, or restriction on processing of their personal data by emailing privacy@skillshare.com, in accordance with GDPR and UK GDPR rights. The policy's use of 'aims to take reasonable steps' is qualified language; GDPR Article 12 establishes specific one-month response timelines as a statutory requirement independent of this policy language.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    EU and UK users can email privacy@skillshare.com to submit a data access, correction, deletion, or processing restriction request under GDPR or UK GDPR.

How other platforms handle this

Garmin Medium

If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to access, correct, or erase your personal data; the right to restrict or object to our processing of your personal data; the right to data portability; and, where our processing is based on your...

Grindr Medium

Depending on where you are located, you may have certain rights regarding your personal information, including the right to access, correct, delete, or restrict processing of your personal information, the right to data portability, and the right to object to or withdraw consent for certain processi...

Strava Medium

For individuals in the United States, please also refer to our Notice For Individuals Residing In Certain US States below and the Consumer Health Data Policy.

See all platforms with this clause type →

Monitoring

Skillshare has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Monitor free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
If you are a resident of the European Economic Area or the United Kingdom, you have certain data protection rights. Skillshare aims to take reasonable steps to allow you to correct, amend, delete or limit the use of your Personal Information. If you wish to be informed about what Personal Information we hold about you and if you want it to be removed from our systems, please contact us at privacy@skillshare.com.

— Excerpt from Skillshare's Skillshare Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

1. REGULATORY LANDSCAPE: This provision directly engages GDPR and UK GDPR, enforced by EU member state supervisory authorities and the UK Information Commissioner's Office. GDPR Article 12 requires responses to data subject requests within one month, extendable by two months for complex requests with notice; Article 17 governs the right to erasure; Article 20 governs data portability. 2. GOVERNANCE EXPOSURE: Medium. The policy's use of qualified language ('aims to take reasonable steps') rather than an unqualified commitment to fulfill data subject rights within statutory timelines may create tension with GDPR's mandatory response obligations. Compliance teams should confirm that operational SLAs align with GDPR Article 12 timelines regardless of this policy language. 3. JURISDICTION FLAGS: EU member state supervisory authorities and the UK ICO have independent enforcement authority over Skillshare's processing of EU and UK resident data. Post-Brexit, the UK IDTA or equivalent transfer mechanisms are required for data flows between the UK and third countries. 4. CONTRACT AND VENDOR IMPLICATIONS: Data processing agreements with all processors handling EU and UK resident data must comply with GDPR Article 28 requirements. The policy does not identify a Data Protection Officer or EU representative, which may be required under GDPR Article 27 depending on Skillshare's volume of EU data subject processing. 5. COMPLIANCE CONSIDERATIONS: Legal teams should confirm whether Skillshare has designated an EU representative under GDPR Article 27 and whether a Data Protection Officer has been appointed or assessed as not required. International data transfer mechanisms for EU and UK data should be documented. The policy should be assessed to confirm that all GDPR-required lawful bases are identified for each processing purpose.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Monitor free for 14 days

Free: track 1 platform + weekly digest. Monitor: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has enforcement authority over US-based companies' data practices and may act where privacy representations to EU or UK users are found to be unfair or deceptive under the FTC Act.
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US
VPPA
United States Federal

Provision details

Document information
Document
Skillshare Privacy Policy
Entity
Skillshare
Document last updated
May 5, 2026
Tracking information
First tracked
May 21, 2026
Last verified
May 21, 2026
Record ID
CA-P-012873
Document ID
CA-D-00244
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
c3a89d6f48d440b59196428bc7713cd0fd55d0ad17fe0f1d34913e5391c6c335
Analysis generated
May 21, 2026 02:26 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Skillshare
Document: Skillshare Privacy Policy
Record ID: CA-P-012873
Captured: 2026-05-21 02:26:39 UTC
SHA-256: c3a89d6f48d440b5…
URL: https://conductatlas.com/platform/skillshare/skillshare-privacy-policy/eu-and-uk-user-rights-under-gdpr/
Accessed: May 25, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Skillshare's EU and UK User Rights Under GDPR clause do?

This provision establishes Skillshare's GDPR and UK GDPR compliance disclosure for EU and EEA and UK users, identifying the contact mechanism for exercising data subject rights; the phrase 'aims to take reasonable steps' is qualified language that does not unequivocally commit to specific statutory response timelines, which may warrant review against GDPR Article 12 requirements.

How does this clause affect you?

Under this provision, EU and UK users may request access to, correction of, deletion of, or restriction on processing of their personal data by emailing privacy@skillshare.com, in accordance with GDPR and UK GDPR rights. The policy's use of 'aims to take reasonable steps' is qualified language; GDPR Article 12 establishes specific one-month response timelines as a statutory requirement independent of …

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 2 platforms. See the full comparison.

Is ConductAtlas affiliated with Skillshare?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Skillshare.