Privacy Notice

DATED 2023-07-31 · VERSION 20230801_rev01 · COMPARED WITH 20220108_rev01 · ARCHIVE SNAPSHOT

Full text changes — 20220108_rev01 to 20230801_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

+_Effective: January 1, 2022._
+_Effective: July 31, 2023._
 ## Key Information
 - Coursera, Inc. is the data controller of the personal information we collect about you (i.e., the entity that determines the means and purposes of collecting, using, and disclosing the personal information), unless you are part of a degree, certain MasterTrack programs, or certain other circumstances as communicated to you, in which case Coursera is the data processor.
 - We collect the personal information set out in the "What Information We Collect" section of this Privacy Notice below, including account registration details such as name and email, details of Content Offerings you undertake, survey information (where you provide it), identity verification data, and information about your use of our site and Services.
 - We use your personal information for the purposes set out in the "How We Use the Information" section of this Privacy Notice below, including providing our site and Services to you, ensuring the security and performance of our site, conducting research relating to Content Offerings, sharing information with our Content Providers and our suppliers, direct marketing, and performing statistical analysis of the use of our site and Services.
 - restrict the way that we process your Personal Data;
 - provide your Personal Data to a third party provider of services; or
 - provide you with a copy of any Personal Data which we hold about you.
 We try to answer every request promptly where possible, and provide our response within the time period stated by applicable law. Keep in mind, however, that when deleting your Personal Data there may be residual information that will remain within our databases, access logs, and other records, which may or may not contain your Personal Data. Please also note that certain Personal Data may be exempt from such requests in certain circumstances, which may include if we need to retain your Personal Data to comply with a legal obligation. When you email us with a request, we may ask that you provide us with information necessary to confirm your identity.
+If you are a resident of California, please also see our [CCPA Notice](https://www.coursera.org/about/privacy/ccpa).
+Further information for residents of U.S. States which have passed relevant U.S. State Privacy Laws is available in our [U.S. State Privacy Laws Notice](https://www.coursera.org/about/privacy/ccpa).
 ## Questions, Suggestions, and Complaints
 If you have any privacy-related questions, suggestions, unresolved problems, or complaints, you may contact us via [privacy@coursera.org](mailto:privacy@coursera.org). If you reside or are located in the EEA, United Kingdom, Switzerland, or other region that offers similar protections, our Data Protection Officer and Privacy Team may assist with all queries regarding our handling of Personal Data at [security@coursera.org](mailto:security@coursera.org). If you reside or are located in the EEA, United Kingdom, Switzerland, or other region that offers similar protections, you may also make a complaint to our supervisory body for data protection matters (namely the UK Information Commissioner's Office or Dutch Autoriteit Persoonsgegevens) or seek a remedy through local courts if you believe that your rights have been breached.
 Coursera BV serves as the EU Representative for Coursera, Inc. To contact Coursera BV, please use the following contact info:
 Phone: +44 20 3457 0256
 Email: eu-representative@coursera.org
 ```
+## California Privacy Rights
+## U.S. State Privacy Rights
 #### Shine the Light
 Shine the Light Under California's "Shine the Light" law, California residents who provide personal information in obtaining products or services for personal, family, or household use are entitled to request and obtain from us, once a calendar year, information about the customer information we shared, if any, with other businesses for their own direct marketing uses. If applicable, this information would include the categories of customer information and the names and addresses of those businesses with which we shared customer information for the immediately prior calendar year (e.g. requests made in 2018 will receive information regarding 2017 sharing activities).
 To obtain this information, please send an email message to [privacy@coursera.org](mailto:privacy@coursera.org) with "Request for California Privacy Information" on the subject line and in the body of your message. We will provide the requested information to you at your email address in response. Please be aware that not all information sharing is covered by the "Shine the Light" requirements and only information on covered sharing will be included in our response.
+#### California Consumer Privacy Act
+#### U.S. State Privacy Laws
+Under the California Consumer Privacy Act ("CCPA"), California residents have the right to know what personal information about them is collected, request deletion of their personal data, opt-out of the sale of their personal data, and not be discriminated against if they choose to exercise any of these rights. Coursera does not sell any of the data we collect about you. If you'd like to exercise any of the other rights afforded to you, log in to your Coursera account, select 'Settings' from the dropdown in the top right, and scroll down to find the appropriate option, or contact us at [privacy@coursera.org](mailto:privacy@coursera.org).
+Under privacy laws of certain U.S. States ("U.S. State Privacy Laws"), residents of relevant U.S. States have the right to know what personal information about them is collected and how this personal information is used and disclosed. Residents of relevant U.S. States can also exercise certain rights in respect of their data (such as access, deletion, and opting in/out of certain disclosures and uses). For more information about how we process personal information relating to residents of relevant U.S. States and the legal rights that such residents have, please review our [U.S. State Privacy Laws Notice here](https://www.coursera.org/about/privacy/ccpa).
+For more information about how we process the personal information of California residents and the rights that California residents have under the CCPA, please review our full [CCPA Notice here](https://www.coursera.org/about/privacy/ccpa).
 ## International Privacy Practices
 Our Sites are primarily operated and managed on servers located and operated within the United States. In order to provide our products and Services to you, you may be sending your Personal Data outside of the country where you reside or are located, including to the United States. Accordingly, if you reside or are located outside of the United States, your Personal Data may be transferred outside of the country where you reside or are located, including to countries that may not or do not provide the same level of protection for your Personal Data. We are committed to protecting the privacy and confidentiality of Personal Data when it is transferred. If you reside or are located within the EEA, United Kingdom, Switzerland, or other region that offers similar protections, and such transfers occur, we take appropriate steps to provide the same level of protection for the processing carried out in any such countries as you would have within the EEA or other regions to the extent feasible under applicable law. We participate in and commit to adhering to the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks when transferring data from the EEA or Switzerland to the United States. Please see our Privacy Shield Notice below for further information.
 ## Changing Our Privacy Notice