The policy discloses rights available to California residents under CCPA and CPRA, including the right to know, access, delete, correct, and opt out of the sale or sharing of personal information, with a designated submission process for privacy requests.
This analysis describes what Udemy's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the operational mechanisms through which California residents can exercise statutory privacy rights, including the specific request submission process and any applicable response timelines the policy discloses.
Interpretive note: The full policy text was not available; this provision is inferred from standard Udemy privacy policy disclosures and CCPA/CPRA compliance requirements rather than verbatim policy text.
Provision name updated from 'California CCPA/CPRA Rights' to 'California Resident Privacy Rights (CCPA/CPRA)' and excerpt content removed.
View full change record →Under these terms, California residents can submit requests to access, delete, or correct their personal information, and can opt out of sharing for cross-context behavioral advertising, using the privacy request process described in the policy.
How other platforms handle this
If you are a California resident, you may have the right to: Know what personal information we collect, use, disclose, sell, or share. Correct inaccurate personal information. Delete your personal information. Opt out of the sale or sharing of your personal information. Limit the use and disclosure ...
If you are a California resident, you have the right to: Know what personal information is being collected about you; Know whether your personal information is sold or disclosed and to whom; Say no to the sale of personal information; Access your personal information; Request deletion of your person...
If you are a California resident, you have the right to know what personal information we collect, use, and disclose about you; the right to request deletion of your personal information; the right to opt out of the sale or sharing of your personal information; the right to correct inaccurate person...
Monitoring
Udemy has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
1. REGULATORY LANDSCAPE: This provision directly engages CCPA (Cal. Civ. Code Section 1798.100 et seq.) as amended by CPRA, enforced by the California Privacy Protection Agency and California Attorney General. The policy's disclosures regarding California rights must meet the substantive requirements of these statutes including response timelines of 45 days with possible extension and non-discrimination for rights exercise. 2. GOVERNANCE EXPOSURE: Medium. The adequacy of Udemy's rights response process, including verification procedures and response timelines, is subject to regulatory scrutiny. Any failure to honor opt-out requests or respond within statutory timelines creates enforcement exposure under CPRA. 3. JURISDICTION FLAGS: This provision applies specifically to California residents; users in other US states with comprehensive privacy laws (Virginia, Colorado, Connecticut, Texas) may have analogous but distinct rights not fully addressed in this provision. EU and EEA users' rights are addressed separately under GDPR provisions in the policy. 4. CONTRACT AND VENDOR IMPLICATIONS: Enterprise customers deploying Udemy for Business on behalf of California-resident employees or students should confirm how Udemy handles rights requests submitted by individuals whose data is processed under a B2B contract, as the controller-processor relationship may affect rights fulfillment obligations. 5. COMPLIANCE CONSIDERATIONS: Legal teams should verify that Udemy's verification process for rights requests is proportionate and does not create unreasonable barriers to rights exercise, confirm that opt-out mechanisms are technically functional, and assess whether Udemy's response timelines and procedures meet CPRA requirements.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes the operational mechanisms through which California residents can exercise statutory privacy rights, including the specific request submission process and any applicable response timelines the policy discloses.
Under these terms, California residents can submit requests to access, delete, or correct their personal information, and can opt out of sharing for cross-context behavioral advertising, using the privacy request process described in the policy.
ConductAtlas has identified this type of provision across 12 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Udemy.