Personal Data Sharing with Teachers

What it is

When you sign up for a class, event, or marketplace transaction on Skillshare, your personal information, including data types described in the Privacy Policy, is shared with the Teacher running that class or event.

Why it matters (compliance & governance perspective)

This provision authorizes Skillshare to share student personal data with individual Teachers, who are third parties operating on the platform, as a condition of enrollment, which has implications for how that data is controlled and protected beyond Skillshare's own systems.

Consumer impact (what this means for users)

Students' personal data, including at minimum enrollment information and potentially other data types specified in the Privacy Policy, is shared with the Teacher each time a student enrolls in a class or event, with limited description in the Terms of what data is included or how Teachers are required to handle it.

Institutional analysis (Compliance & governance intelligence)

(1) REGULATORY LANDSCAPE: This provision engages GDPR Article 13 disclosure requirements, as sharing personal data with Teachers who may act as independent data controllers triggers transparency and potentially consent obligations. Under CCPA, the disclosure that personal information is shared with Teachers as part of the service should be assessed against the definition of a sale or sharing of personal information. If Teachers are independent controllers under GDPR, Skillshare's obligations as the party facilitating the transfer include ensuring appropriate safeguards exist. The FTC also has authority over data sharing practices that may be unfair or deceptive if not adequately disclosed. (2) GOVERNANCE EXPOSURE: Medium. The provision references the Privacy Policy for the full scope of data shared, making a complete governance assessment dependent on that document. The characterization of Teachers as recipients of personal data, and whether they act as processors or independent controllers, has significant implications for GDPR compliance and data subject rights. (3) JURISDICTION FLAGS: EU and UK users have heightened exposure given GDPR requirements for transparency about data recipients and the legal basis for sharing. California users should assess whether the sharing constitutes a sale or sharing of personal information under CCPA, which would trigger opt-out rights. Users in jurisdictions with strong data localization requirements should assess whether Teacher data access creates cross-border transfer issues. (4) CONTRACT AND VENDOR IMPLICATIONS: Enterprise customers deploying Skillshare for employee training should assess whether employee personal data being shared with Teachers raises employer data protection obligations, particularly in the EU where employee data has heightened protections. Data processing agreements between Skillshare and enterprise customers should address the Teacher data sharing mechanism. (5) COMPLIANCE CONSIDERATIONS: Legal teams should review the Privacy Policy in conjunction with this provision to assess the full scope of data shared with Teachers, the legal basis relied upon, and whether Teachers are required to enter into data processing agreements with Skillshare. A data mapping exercise should include the Teacher data sharing flow as a distinct processing activity.

Applicable agencies

Applicable regulations

Provision details

Other risks in this policy

• Mandatory Arbitration Agreement high
• Class Action Waiver high
• User Content License medium
• Auto-Renewal Subscription with Payment Method Update medium
• Unilateral Terms Modification medium
• Account Termination for Inactivity medium

Related Analysis

• Meta Removed 438 Sentences From Its Privacy Policy. Here Is What Disappeared.

  ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.

• 23andMe Is Bankrupt. What Happens to Your DNA Now?

  Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.