Privacy Notice

DATED 2026-01-29 · VERSION 20260201_rev01 · COMPARED WITH 20260101_rev01 · ARCHIVE SNAPSHOT

Full text changes — 20260101_rev01 to 20260201_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

1_Last updated: January 1, 2026._
1_Last updated: January 29, 2026._
22
33## Key Information
44
55- Coursera, Inc. is the data controller of the Personal Data (as defined below) we process about you, meaning that we determine the means and purposes of collecting, using, storing, disclosing, or otherwise processing your Personal Data. However, if you are participating in a degree program, certain certificate programs where you are required to enroll with the academic institution, or in other circumstances communicated to you, Coursera is the data processor.
66- We collect the Personal Data set out in the "What Personal Data We Collect" section of this Privacy Notice below, including account registration details such as name and email, details of Content Offerings you undertake, survey information (where you provide it), identity verification data, and information about your use of the Site (as defined below) and Services.
77- We use your Personal Data for the purposes set out in the "Legal bases and Purposes for Processing your Personal Data" section of this Privacy Notice below. These purposes include providing the Site and Services to you, maintaining the security and performance of the Site, conducting research relating to Content Offerings, sharing information with our Content Providers and our suppliers, direct marketing, and performing statistical analysis of the use of our Site and Services.
157157- restrict the way that we process your Personal Data;
158158- provide your Personal Data to a third party provider of services; or
159159- provide you with a copy of any Personal Data which we hold about you.
160160
161161For more information in relation to your rights with respect to automated decision-making please refer to the "How we use AI" section above.
162162
163We try to answer every request promptly where possible, and provide our response within the time period stated by applicable law. Keep in mind, however, that when deleting your Personal Data there may be residual information that will remain within our databases, access logs, and other records, which may or may not contain your Personal Data. Please also note that certain Personal Data may be exempt from such requests in certain circumstances, which may include if we need to retain your Personal Data to comply with a legal obligation. When you email us with a request, we may ask that you provide us with information necessary to confirm your identity.
163We try to answer every request promptly where possible, and provide our response within the time period stated by applicable law. Further information for residents of U.S. States which have enacted state privacy laws is available in our [U.S. State Privacy Laws Notice](https://www.coursera.org/about/privacy/ccpa).
164164
165Further information for residents of U.S. States which have enacted state privacy laws is available in our [U.S. State Privacy Laws Notice](https://www.coursera.org/about/privacy/ccpa).
165If you request deletion of your Personal Data, we will delete the Personal Data associated with that account, including your learner profile, course history, and any certificates or certifications issued through our platform. Once your account is deleted, certificates and certifications cannot be accessed, verified, or reissued, and we recommend downloading any certificates and certifications you wish to keep before submitting a deletion request. Following deletion, we may retain limited Personal Data where necessary for lawful and legitimate purposes, which may vary depending on your location, such as complying with legal obligations. In addition, residual information may remain within our databases, access logs, or other records, which may or may not contain your Personal Data.
166166
167167## Questions, Suggestions, and Complaints
168168
169169If you have any privacy or AI-related questions, suggestions, unresolved problems, or complaints (including about a breach of the Australian Privacy Principles), you may contact us via [privacy@coursera.org](mailto:privacy@coursera.org).
170170
171171If you reside or are located in the EEA, UK, Switzerland, or other region that offers similar protections, you may also make a complaint to your local supervisory body for data protection matters (our supervisory body for our UK entity below is the UK Information Commissioner's Office and our EU Representative is the Dutch Autoriteit Persoonsgegevens) or seek a remedy through local courts if you believe that your rights have been breached.
217217- Coursera may also share certain information about your use of Live2Coursera Services back with any associated Third Party Offering. Please note that when you interact with any Third Party Offering, such Third Party Offering may independently collect information about you and solicit information from you. We have no control over, do not review, and are not responsible for a Third Party Offering's privacy practices. We recommend that you review any and all Third Party Offering's privacy notice for more information.
218218
219219If you have any questions about how we handle your information, please contact us at privacy@coursera.org.
220220
221221## Data Privacy Framework (DPF) Notice
222222
223_Last updated: January 1, 2026._
223_Last updated: January 28, 2026._
224224
225225## Introduction.
226226
227227Coursera, Inc. (referred to as "we," "us," or "our"), believes in protecting your privacy. This DPF Notice contains supplementary information relating to Personal Data transferred on the basis of the EU-U.S. Data Privacy Framework, the UK extension to the EU-U.S. Data Privacy Framework, or the Swiss-U.S. Data Privacy Framework. This DPF Notice should be read in conjunction with Coursera's [Privacy Notice](https://www.coursera.org/about/privacy), which provides details of the Personal Data processed, purposes for which Personal Data is collected, processed and disclosed, types of third parties to which Personal Data is disclosed, and rights of individuals. To the extent of any conflict between this DPF Notice and Coursera's Privacy Notice, this DPF Notice prevails.
228228
229229We participate in and commit to adhering to the EU-U.S. Data Privacy Framework, the UK extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework (together the "DPF") which includes the DPF Principles of notice, choice, accountability for onward transfer, security, data integrity and purpose limitation, access, and recourse, enforcement and liability (the "Principles") for transfers of Personal Data from the EEA, UK and Switzerland, respectively, to the U.S. To learn more about the DPF, please visit the DPF website: [https://www.dataprivacyframework.gov](https://www.dataprivacyframework.gov/). For more information regarding our DPF certification, please click [here](https://www.dataprivacyframework.gov/s/participant-search/participant-detail) or search for 'Coursera' in the DPF list of participants.
231231## Your Choices
232232
233233We will offer you the opportunity to opt-out of your Personal Data (or to provide explicit consent for Sensitive Personal Data) being: (i) disclosed to a third party (other than an agent performing tasks on behalf of and under the instructions of Coursera) ); or (ii) used for a purpose materially different from the purpose for which it was originally collected (as set out in our Privacy Notice), or subsequently authorized by you, when the circumstances arise. You also have the ability to opt out at any time from the use of your Personal Data for direct marketing purposes and certain uses of tracking technologies. To exercise this right, please check your account and cookie settings. If you have further questions related to the above, you can also contact us at [privacy@coursera.org](mailto:privacy@coursera.org).
234234
235235## Recourse, Enforcement and Liability
236236
237We will regularly review our compliance with the statements set forth in this DPF Notice, and we will provide an independent way to resolve complaints about our privacy practices. We encourage interested persons to first contact us (contact information provided below) and we will investigate and attempt to resolve any complaints and disputes regarding use and disclosure of Personal Data in accordance with the Principles. If your enquiry is not satisfactorily addressed by us, we have registered with the International Centre for Dispute Resolution ("ICDR"), a division of the American Arbitration Association, to provide independent third party dispute resolution (free of charge) to you. To contact ICDR and/or learn more about the company's dispute resolution services, including complaint submission, please visit: [https://go.adr.org/dpf\_irm.html](http://go.adr.org/privacyshield.html). There may also be circumstances when disputes can be resolved through the DPF binding arbitration process. Please see the [DPF website for further information](https://www.dataprivacyframework.gov/s/article/My-Rights-under-the-Data-Privacy-Framework-DPF-Program-dpf). For residents of Switzerland, the Swiss Federal Data Protection and Information Commissioner's authority will replace that of the EU bodies. For residents of the United Kingdom, the Information Commissioner's Office will serve this role.
237We will regularly review our compliance with the statements set forth in this DPF Notice, and we will provide an independent way to resolve complaints about our privacy practices. We encourage interested persons to first contact us (contact information provided below) and we will investigate and attempt to resolve any complaints and disputes regarding use and disclosure of Personal Data in accordance with the Principles. If your enquiry is not satisfactorily addressed by us, we have registered with the International Centre for Dispute Resolution ("ICDR"), a division of the American Arbitration Association, to provide independent third party dispute resolution (free of charge) to you. To contact ICDR and/or learn more about the company's dispute resolution services, including complaint submission, please visit: [https://go.adr.org/dpf\_irm.html](https://go.adr.org/dpf_irm.html). There may also be circumstances when disputes can be resolved through the DPF binding arbitration process. Please see the [DPF website for further information](https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction). For residents of the UK, the EEA, Switzerland, or other region that offers similar data protection rights, you may also lodge a complaint with your local data protection supervisory authority or seek a remedy through the courts. In the UK, the relevant supervisory authority is the Information Commissioner's Office which can be contacted at [https://ico.org.uk/](https://ico.org.uk/). A list of EEA supervisory authorities and how to contact them is available from the European Data Protection Board at [https://edpb.europa.eu/about-edpb/about-edpb/members\_en](https://edpb.europa.eu/about-edpb/about-edpb/members_en). In Switzerland, the supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC) available at [https://www.edoeb.admin.ch/de](https://www.edoeb.admin.ch/de).
238238
239239In the context of an onward transfer, Coursera has responsibility for the processing of Personal Data it receives under the DPF and subsequently transfers to a third party acting as an agent on its behalf. Coursera shall remain liable under the Principles if its agent processes such Personal Data in a manner inconsistent with the Principles, unless Coursera proves that it is not responsible for the event giving rise to the damage.
240240
241241## Jurisdiction
242242
243243As part of our participation in DPF, we are subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission and other authorized statutory bodies.
245245## Modifications
246246
247247We may amend this DPF Notice from time-to-time in accordance with the requirements of the DPF or a successor data transfer framework. The most recent version of the DPF Notice will always be posted to this website. Anytime that we do make such changes, we will also update the effective date listed at the top of the DPF Notice. Please be sure to review the most recent version of the DPF Notice each time that you visit this website so that you are aware of how we collect, use, and retain Personal Data.
248248
249249## Privacy Notice Addendum
250250
251_Last updated: December 3, 2025._
251_Last updated: January 21, 2026._
252252
253253Coursera is providing and integrating a ChatGPT-branded app within ChatGPT solely to provide staff of OpenAI customers ("**you**") with access to OpenAI courses (the "**App**"). In order to access the App you must have a Coursera account. If you choose to close your Coursera account, or if Coursera closes or suspends your Coursera account in accordance with its [Terms of Use](https://www.coursera.org/about/terms), you will no longer be able to access the App and any related OpenAI courses provided via the App.
254254
255255The [Coursera Privacy Notice](https://www.coursera.org/about/privacy) ("**Privacy Notice**") continues to apply to your use of Coursera services, including your use of the App. This Privacy Notice Addendum ("**Addendum**") is incorporated into, and forms part of, the Privacy Notice. This Addendum provides additional information about how Coursera processes your personal information specifically in connection with the App. For information on how to contact Coursera with any privacy-related questions, or to exercise your privacy rights, please refer to the Privacy Notice. If there is any conflict between this Addendum and the Privacy Notice, this Addendum will control only with respect to the App.
256256
257257## Personal information Coursera processes and why
258258
259259In addition to the information described in the Privacy Notice, Coursera may receive the following personal information from you, OpenAI, or your employer to support your access to the App and your participation in OpenAI courses:
260260
261261- **Your name, email address, and similar organization-specific identifiers**. Coursera uses this information to create or manage your Coursera account, or enable single sign-on (SSO) if requested by OpenAI or your employer.
262262
263263- **Limited data related to your course activity in ChatGPT (such as your course grade and the reason for that grade)**. Coursera uses this information only to track your course progress, help you move through the OpenAI course, and issue your OpenAI course completion badge on OpenAI's behalf.
264
265- Coursera uses **cookies**, **web beacons**, and **similar technologies** when you visit the App. Some cookies are necessary for the App's basic operation and core features. We also use **session-replay technologies**, such as those provided by Datadog, to record users' interactions with the App and view video replays of user sessions. These replays help us diagnose usability issues and identify areas for improvement.