U.S. State Privacy Laws Notice 2023
95 removals
68 lines
192 additions
164 lines
Privacy NoticeCCPA NoticeData Protection AddendumCookies PolicyTerms of Use
Privacy NoticeCCPA NoticeData Protection AddendumCookies PolicyTerms of Use
California Consumer Privacy Act Notice
California Consumer Privacy Act Notice
Effective: January 1, 2021.
Effective: June 30, 2023.
This notice addresses the specific disclosure requirements under the California Consumer Privacy Act of 2018 (“CCPA”). It is incorporated into the Coursera Privacy Notice and applies to personal information about California residents using our Site and Services (“Consumers,” “You,” or “Your”) that we collected over the previous 12 months. For purposes of the CCPA, personal information means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household.
This notice addresses the specific disclosure requirements under the California Consumer Privacy Act of 2018 (“CCPA”) as amended by the California Privacy Rights Act (“CPRA”), the Virginia Consumer Data Protection Act (“VCDPA”), Colorado Privacy Act (“CPA”) and the Connecticut Data Privacy Act (“CTDPA”), collectively the “U.S. State Privacy Laws”. It is incorporated into the Coursera Privacy Notice and applies to personal information relating to residents of the U.S. States listed above, as applicable, using our Site and Services (“Consumers,” “You,” or “Your”) that we collected over the previous 12 months.
In the event of a conflict between this CCPA Notice and any of our other privacy notices, this CCPA Notice shall control only with respect to the personal information of California residents.
For the purposes of the CCPA, “personal information” means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household. For the purposes of the VCDPA, CPA and CTDPA, “personal information” means information that is linked or reasonably linkable to an identified or identifiable individual.
For more information about the data we collect and how we use it, please review our Privacy Notice.
In the event of a conflict between this U.S. State Privacy Laws Notice and any of our other privacy notices, this U.S. State Privacy Laws Notice shall control only with respect to the personal information of residents of the U.S. States identified above.
Personal Information Purposes of Processing
For further information about the personal information we collect and how we use it, please review the Coursera Privacy Notice.
This section describes the purposes for which we collect and use personal information. We collect and use personal information regarding California residents for the purposes described below:
Collection and Use of Personal Information
run, grow and develop our business;
The table below outlines the categories of personal information we may collect, the sources and recipients of personal information, and the purposes for which we may use personal information (depending on how and why you interact with the Site and Services). Please see the Coursera Privacy Notice, the Coursera Cookies Policy and the “Disclosure of Personal Information” section in this U.S. State Privacy Laws Notice for more detailed information.
operate our Site and provide our Services;
select appropriately skilled and qualified suppliers;
Personal Information Category
build relationships with partners and academic institutions;
Sources
carry out research and statistical analysis;
Purposes
carry out marketing and business development; and
Recipients
for internal administrative and auditing purposes.
Customer Records (e.g., as name, address, telephone number, education, employment history, credit card or debit card number)
We do not sell your personal information and we do not have actual knowledge that we sell the personal information of minors under 16 years of age. We may disclose personal information to other parties as follows:.
Information you provide directly or through your interactions with our Site or Services; Information from our partners or customers
(a) Providing our Site and Services; (b) Improving our Site and Services; (c) Ensuring the security of our Site and Services; (d) Providing technical support; (e) Enabling participation in content offerings and Forums; (f) Performing identity verification; (g) Communicating with you; (h) Enabling research; (i) Marketing and business development; (j) Exercising/protecting legal rights and complying with legal obligations
Service Providers
Service Providers
We may disclose personal information to our service providers in order to have them perform services that assist us in fulfilling the purposes listed above. Our service providers provide us with a range of services including: hosting our Site, processing payments, legal and accounting professional services, postal and email delivery, conducting analysis to improve our products and Site, fulfilling requests you make, managing payments, and answering your questions. We don’t allow our service providers to retain, use, or otherwise handle the data we provide to them for their own purposes.
Identifiers (e.g., real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers) and biometric information
Security
Information you provide to us directly or through your interactions with our Site and Services; Information from our partners or customers (a) Providing our Site and Services; (b) Improving our Site and Services; (c) Ensuring the security of our Site and Services; (d) Providing technical support; (e) Enabling participation in content offerings and Forums; (f) Performing identity verification; (g) Communicating with you; (h) Enabling research; (i) Marketing and business development; (j) Exercising/protecting legal rights and complying with legal obligations
We may disclose personal information to our partners, service providers, and law enforcement to secure our Site and Services, including to detect, prevent, and investigate security incidents or violations of our Terms of Use or applicable laws.
Service Providers; Advertising Partners
Audits
Characteristics of protected classifications under applicable laws (e.g., your gender or age)
We may disclose personal information to our partners and service providers in order to audit interactions and transactions for legal compliance and other purposes.
Information you provide to us directly
Service Improvements
(a) Performing identity verification;(b) Enabling research; (c) Exercising/protecting legal rights and complying with legal obligations
We may disclose personal information to our service providers in order to improve our Site and Services, such as to identify bugs, repair errors, or ensure that services function as intended, or conduct internal research and analysis to improve our technology.
Service Providers; Coursera Partners; Research Partners.
We may disclose personal information to third parties at your direction.
Commercial information (e.g., information regarding products or services purchased, obtained, or considered)
Personal Information Categories
Information you provide to us directly, such as purchasing a standalone course or subscription; Your interactions with our Site and Services Information from our partners and customers
Our Privacy Notice covers our personal information collection and usage more fully. The chart below describes the categories of personal information we collect and the sources from which we collect the personal information, organized into the categories specified by the CCPA.
(a) Providing our Site and Services; (b) Improving our Site and Services; (c) Ensuring the security of our Site and Services; (d) Providing technical support; (e) Enabling participation in content offerings and Forums; (f) Communicating with you; (g) Enabling research; (h) Marketing and business development; (i) Exercising/protecting legal rights and complying with legal obligations
Personal Information Category
Service Providers; Coursera Partners; Coursera Customers; Research Partners
Sources
Internet or Other Electronic Network Activity Information (e.g., browsing history, search history, and information regarding your interactions with our Services)
Personal information described in Cal. Civ. Code §1798.80(e)(such as name, address, telephone number, education, employment history, credit card or debit card number)
Your interactions with our Site and Services
Information you provide directly or through your interactions with our Services
(a) Providing our Site and Services; (b) Improving our Site and Services; (c) Ensuring the security of our Site and Services; (d) Providing technical support; (e) Enabling participation in content offerings and Forums; (f) Communicating with you; (g) Enabling research; (h) Marketing and business development; (i) Exercising/protecting legal rights and complying with legal obligations
Information from our partners or customers
Service Providers; Coursera Partners; Coursera Customers; Advertising Partners; Research Partners
Identifiers (e.g., real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers)
Geolocation Data
Information you provide to us directly or through your interactions with our Site and Services (as defined in our Terms of Use and Privacy Notice)
Information you provide to us directly or through your interactions with our Site and Services
Vendors that provide information to help us serve relevant ads and understand the ads’ effectiveness
(a) Providing our Site and Services; (b) Improving our Site and Services; (c) Ensuring the security of our Site and Services; (d) Providing technical support; (e) Enabling participation in content offerings and Forums; (f) Performing identity verification; (g) Communicating with you; (h) Enabling research; (i) Marketing and business development; (j) Exercising/protecting legal rights and complying with legal obligations
Characteristics of protected classifications under California or Federal law (e.g., your gender or age) (“Characteristics of Protected Classifications”)
Service Providers; Coursera Partners; Coursera Customers; Research Partners
Information you provide to us directly
Professional or Employment-Related Information / Education information
Commercial information (e.g., information regarding products or services purchased, obtained, or considered)
Information you provide to us directly; Information from our customers or partners
Information you provide to us directly, such as purchasing standalone content or a subscription
(a) Providing our Site and Services; (b) Improving our Site and Services; (c) Ensuring the security of our Site and Services; (d) Providing technical support; (e) Enabling participation in content offerings and Forums; (f) Communicating with you; (g) Enabling research; (h) Marketing and business development; (i) Exercising/protecting legal rights and complying with legal obligations
Your interactions with our Site and Services
Service Providers; Coursera Partners; Coursera Customers; Research Partners
Information from our partners and customers
Inferences
Internet or Other Electronic Network Activity Information (e.g., browsing history, search history, and information regarding your interactions with our Services)
Information you provide to us directly or through your interactions with our Site and Services; Information from our partners and customers
Your interactions with our Site and Services
(a) Providing our Site and Services; (b) Improving our Site and Services; (c) Ensuring the security of our Site and Services; (d) Providing technical support; (e) Enabling participation in content offerings and Forums; (f) Performing identity verification; (g) Communicating with you; (h) Enabling research; (i) Marketing and business development; (j) Exercising/protecting legal rights and complying with legal obligations
Geolocation Data
Service Providers; Coursera Partners; Coursera Customers; Research Partners
Information you provide to us directly or through your interactions with our Site and Services
Audio, electronic, visual or similar information
Professional or Employment-Related Information
Information you provide directly or through your interactions with our Services, customers or partners
Information you provide to us directly
(a) Providing our Site and Services; (b) Improving our Site and Services; (c) Ensuring the security of our Site and Services; (d) Providing technical support; (e) Enabling participation in content offerings and Forums; (f) Performing identity verification; (g) Communicating with you; (h) Enabling research; (i) Exercising/protecting legal rights and complying with legal obligations
Information from our customers, partners, or your employer
Service Providers; Coursera Partners; Coursera Customers; Research Partners
Inferences
Information you provide to us directly or through your interactions with our Site and Services
Sensitive Personal Information Categories
Information from our partners and customers
Depending on how and why you interact with the Site and Services, some of the personal information that Coursera may collect and use about you, identified in “Collection and Use of Personal Information” above, may be considered “sensitive” under applicable U.S. State Privacy Laws:
Audio, electronic, visual or similar information
Information you provide directly or through your interactions with our Services, customers or partners
Government ID (e.g. driver’s license, state identification card, or passport number);
We use this personal information for the purposes outlined in our Privacy Notice.
California Residents' Privacy Rights
Account log-in, debit or credit card number, and the means to access the account (security or access code, password, credentials, etc.);
California residents have rights to request access to or deletion of their personal information and may not be discriminated against because they exercise any of their rights under the California Consumer Privacy Act in violation of Cal. Civ. Code §1798.125. You can make requests as follows: (1) use our self-serve access and deletion tools available in your account settings or (2) send an email to privacy@coursera.org with details of your specific request. We may ask that you provide certain information to verify your identity, and the information we request from you will depend on your prior interactions with us and the sensitivity of the personal information at issue. Once confirmed, we will respond to your request in accordance with the CCPA. If we deny your request, we will explain why.
Demographic information (e.g. racial or ethnic origin);
You may designate an authorized agent to make a request under the CCPA on your behalf if: (1) the authorized agent is a natural person or a business entity registered with the Secretary of State of California; and (2) you sign a written declaration that you authorize the authorized agent to act on your behalf. We may ask that you provide certain information to verify your identity and that you authorized the authorized agent to act on your behalf. If you provide an authorized agent with power of attorney pursuant to Probate Code sections 4000 to 4465, it may not be necessary to perform these steps and we will respond to any request from such authorized agent in accordance with the CCPA.
Biometrics information processed for identification purposes;
California residents also have the right to opt out of the sale of their personal information; Coursera does not provide this option as we do not sell your personal information. If you have any questions or concerns regarding this CCPA Notice, please email privacy@coursera.org.
Precise geolocation information;
Information concerning health.
We only use or disclose sensitive personal information for the following purposes:
Perform the services or provide the goods you reasonably expect;
Help ensure the security and integrity of our services, systems, and data, to combat malicious deceptive, fraudulent or illegal acts, and to protect the physical safety of individuals, to the extent the processing is reasonably necessary and proportionate;
For short-term transient use (including non-personalised advertising), so long as the personal information is not disclosed to a third party, is not used for profiling, and is not used to alter an individual’s experience outside the current interaction with Coursera;
Perform services on behalf of Coursera, such as maintaining accounts, providing customer service, processing, or fulfilling orders/transactions, verifying customer information, processing payments, providing financing, providing analytics, providing storage, and similar services;
Undertake activities to verify or maintain the quality or safety of, or improve, upgrade, or enhance a service or device owned or controlled by Coursera;
Collect or process sensitive personal information where the collection or processing is not for inferring characteristics about the individual;
Any other activities in accordance with any future regulations that are issued pursuant to U.S. State Privacy laws;
Where required under applicable U.S. State Privacy laws or other applicable legislation, we will request your consent to collect and use sensitive personal information for the purposes listed above, or other purposes that are communicated to you at the time that consent is requested.
Disclosure of Personal Information
We may disclose the personal information identified in the “Collection and Use of Personal Information” section of this U.S. State Privacy Laws Notice to third parties as follows (depending on how and why you interact with the Site and Services):
Service Providers
We may disclose personal information to our service providers in order to have them perform services that assist us in fulfilling the purposes listed above. Our service providers provide us with a range of services including: hosting our Site, processing payments, legal, auditing and accounting professional services, postal and email delivery, conducting analysis to improve our products and Site, fulfilling requests you make, managing payments, performing identity verification, and answering your questions. We may disclose personal information to our service providers in order to improve our Site and Services, such as to identify bugs, repair errors, or ensure that services function as intended, or conduct internal research and analysis to improve our technology.
Coursera Partners
We may disclose personal information to Coursera partners (e.g. Universities, educational institutions, or industry partners) who (a) offer degree Programs hosted on the Site, in which you enroll or express an interest; or (ii) create content, programs, projects or other courses which Coursera provides on the Site and in which you enroll.
Coursera Customers
Where your access to our Services is provided to you as part of your relationship with your employer, academic institution, or corporate sponsor we may disclose to them (or an authorized entity acting on their behalf) information about your participation and learning progress on Coursera.
Advertising Partners
We may disclose limited personal information to advertising partners in order to show you advertising that is more likely to be of interest to you. You can learn more about this in the “Privacy Rights” section of this U.S. State Privacy Laws Notice and Coursera’s Cookies Policy. You can opt-out of this disclosure by visiting Coursera’s Do Not Sell / Share My Personal Information link and opting out of ‘Targeting Cookies’.
Research Partners
We may share course data (including quiz or assignment submissions, grades, and forum discussions), information about your activity on our Site, and demographic data from surveys operated by us with our partners and research institutes for research related to online education.
Other Disclosures
On an ad hoc basis as necessary, we may also disclose personal information to third parties (such as our partners, service providers, and law enforcement and government agencies) to secure our Site and Services and rights and interests of Coursera and its partners, including to detect, prevent, and investigate security incidents or violations of our Terms of Use or applicable laws, or in the context of legal proceedings. We may also disclose personal information to an acquirer, assignee or other successor entity in connection with a sale, merger, or reorganization of all or substantially all of the equity, business, or assets of Coursera. Additionally, we disclose personal information to third parties at your direction (for example, if you choose to make your Coursera profile public, or post in a publicly-available Coursera forum, Coursera will make the relevant Personal Information available to other users of the Site).
Retention of Personal Information
We keep your personal information for no longer than necessary for the purposes for which the personal information is collected and processed. For further information, please see the "Retention of Personally Identifiable Information" section of the Coursera Privacy Notice.
Privacy Rights
You may have certain rights in respect of your personal information under applicable U.S. State Privacy Laws. You may not be discriminated against because you exercise your rights under applicable U.S. State Privacy Laws.
A summary of the rights that may be applicable to you is as follows:
Rights of access, deletion and portability
Residents of California, Virginia, Colorado and Connecticut have rights to request access, deletion and portability in respect of their personal information.
Right of correction
Residents of California, Virginia, Colorado and Connecticut have the right to request that inaccuracies in their personal information are corrected.
Rights to opt-out of sale/sharing of Personal Information and/or personalized/targeted advertising
Residents of California, Virginia, Colorado and Connecticut have the right to opt-out of sales of their personal information. Residents of California have the right to opt-out of sharing of their personal information, and residents of Virginia, Colorado and Connecticut have the right to opt-out of personalized/targeted advertising.
As U.S. State Privacy Laws define “sale” or “sharing” of personal information very broadly, we “sell” or “share” personal information with third parties if we disclose personal information to advertising partners in order to show you advertising that is more likely to be of interest to you. The personal information disclosed for these purposes is (a) identifiers (e.g. online identifiers and Internet Protocol address); and (b) internet or other electronic network activity information (e.g. information about your interactions with our Site/Services). Further information is available in Coursera’s Cookies Policy.
You can opt-out of disclosure of personal information with third parties/use of Personal Information for personalized/targeted advertising by visiting Coursera’s Do Not Sell / Share My Personal Information link and opting out of ‘Targeting Cookies’. Please note that you will still see non-personalized/targeted advertising (e.g. contextual advertising).
We do not sell or share personal information for any other purposes and we do not have actual knowledge that we sell, share or use for personalized/targeted advertising purposes personal information of minors under 16 years of age.
Right to Limit Use of Sensitive Personal Information
As described in the “Sensitive Personal Information Categories” section, above, we may collect, process, or disclose certain personal information that qualifies as “sensitive” personal information under applicable U.S. State Privacy Laws.
Residents of California have the right to limit the use or disclosure of their sensitive personal information. We do not use or disclose your sensitive personal information of California residents for purposes other than those listed in the “Sensitive Personal Information Categories” section above, without your consent or as permitted or required under applicable laws, so we do not offer California residents an ability to limit their use of sensitive personal information.
Right to opt-out of solely automated decisions / profiling producing legal or similarly significant effects
Residents of California, Virginia, Colorado and Connecticut have the right to opt out of solely automated decisions or profiling which produces legal or similarly significant effects for individuals.
We do not undertake solely automated decisions or profiling which produces legal or similarly significant effects for individuals, so no opt-out is currently offered.
Exercising your rights
You can make privacy requests as follows (depending on the right you are seeking to exercise):
Log-in to Coursera account to view or edit your profile details, use our self-serve access tool, or use our self-serve deletion tool;
Use Coursera’s Do Not Sell / Share My Personal Information link and opt out of ‘Targeting Cookies’, to opt-out of disclosures/use of personal information for targeted/personalized advertising purposes; or
Send an email to privacy@coursera.org with details of your specific request.
We may ask that you provide certain information to verify your identity, and the information we request from you will depend on your prior interactions with us and the sensitivity of the personal information at issue. Once confirmed, we will respond to your request in accordance with the applicable U.S. State Privacy Law. If we deny your request, we will explain why. Under some U.S. State Privacy Laws, you may designate an authorized agent to make certain requests on your behalf.
Right to appeal
Residents of Virginia, Colorado and Connecticut have the right to appeal a Coursera decision in respect of your privacy rights. To appeal a decision, send an email to privacy@coursera.org with details of your original request and appeal.
Revisions
Revisions
Below is a list of all the revisions made to the content of our Data Protection Addendum, with links to view the difference between each revision.
Below is a list of all the revisions made to the content of our U.S. State Privacy Laws Notice (formerly titled "California Consumer Privacy Act Notice"), with links to view the difference between each revision.
2020-12-18: Updated for clarity and to give additional details on the rights of California residents
2023-06-30: Updated to (a) reflect additional requirements of CCPA, as amended by CPRA, and other U.S. State Privacy Law requirements; (b) summarize/link to other key privacy information, already provided in the Coursera Privacy Notice and Coursera Cookies Policy; and (c) improve formatting of information provided.
2020-12-18: Updated for clarity and to give additional details on the rights of California residents