Third-Party Advertising and Analytics Data Sharing

What it is

The policy authorizes Skillshare to share user data including identifiers, behavioral data, and inferred interests with advertising partners and analytics vendors for the purpose of delivering targeted advertisements.

Why it matters (compliance & governance perspective)

This provision establishes a data-sharing relationship with third-party advertising partners that may constitute 'selling' or 'sharing' of personal data under CCPA and CPRA, triggering opt-out rights for California residents and requiring specific disclosures. Under GDPR, sharing behavioral data with advertising partners for targeted advertising requires a valid lawful basis and, in many interpretations by EU supervisory authorities, explicit consent.

Consumer impact (what this means for users)

Under this provision, Skillshare may share user identifiers, browsing activity, and inferred interest data with advertising and analytics partners for targeted advertising purposes. California residents have the right to opt out of this sharing through the mechanisms described in the policy.

What you can do

Institutional analysis (Compliance & governance intelligence)

1. REGULATORY LANDSCAPE: This provision engages CCPA and CPRA, which define the sharing of personal data for cross-context behavioral advertising as a regulated activity requiring opt-out rights; the California Privacy Protection Agency and California Attorney General are the primary enforcement authorities. Under GDPR and UK GDPR, sharing behavioral and inferred-interest data with advertising partners for targeted advertising purposes may require consent as the lawful basis, particularly given guidance from EU supervisory authorities on real-time bidding and behavioral advertising ecosystems. 2. GOVERNANCE EXPOSURE: Medium. The provision authorizes sharing with advertising partners in broad terms without specifying the categories of third-party recipients or the data fields shared, creating potential exposure under CCPA and CPRA transparency requirements and GDPR's data minimization and purpose limitation principles. 3. JURISDICTION FLAGS: California residents have statutory opt-out rights under CCPA and CPRA that this provision must operationally support. EU and UK users may have a right to object to or withhold consent for this processing depending on the lawful basis asserted; the policy does not specify the lawful basis for advertising data sharing in the publicly available text. 4. CONTRACT AND VENDOR IMPLICATIONS: Procurement teams should confirm that data processing agreements or equivalent contracts are in place with all advertising and analytics partners named or categorized as recipients. CCPA and CPRA require specific contractual terms with third parties receiving personal data for commercial purposes. 5. COMPLIANCE CONSIDERATIONS: Compliance teams should audit the list of advertising and analytics partners receiving user data, confirm that opt-out mechanisms are technically operational and apply to all downstream sharing, and verify that GDPR consent mechanisms are in place for EU and UK users prior to any advertising data sharing.

Applicable agencies

Applicable regulations

Provision details

Other risks in this policy

• Business Transfer Data Disclosure medium
• Superpeer Acquisition Data Migration medium
• California Resident Rights and Opt-Out medium
• EU and UK User Rights Under GDPR medium
• Age Restriction and Minors low
• Data Retention low

Related Analysis

• Meta Removed 438 Sentences From Its Privacy Policy. Here Is What Disappeared.

  ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.

• 23andMe Is Bankrupt. What Happens to Your DNA Now?

  Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.