U.S. State Privacy Laws Notice

Effective: January 1, 2025.

This notice addresses the specific disclosure requirements under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”) and other state privacy laws applicable to us that grant their residents the rights described below, collectively the “U.S. State Privacy Laws.” It is incorporated into the Coursera Privacy Notice and applies to personal information relating to residents of applicable U.S. states using our Site and Services (“you” or “your”) that we collected over the previous 12 months.

For the purposes of this U.S. State Privacy Laws Notice, “personal information” has the meaning given to “personal data,” “personal information” or other similar terms under U.S. State Privacy Laws.

In the event of a conflict between this U.S. State Privacy Laws Notice and any of our other privacy notices, this U.S. State Privacy Laws Notice shall control only with respect to the personal information of residents of the U.S. States identified above.

For further information about the personal information we collect and how we use it, please review the Coursera Privacy Notice.

Collection and Use of Personal Information

The table below outlines the categories of personal information we may collect, the sources and recipients of personal information, and the purposes for which we may use personal information (depending on how and why you interact with the Site and Services). Please see the Coursera Privacy Notice, the Coursera Cookies Policy and the “Disclosure of Personal Information” section in this U.S. State Privacy Laws Notice for more detailed information.

Sensitive Personal Information Categories

Depending on how and why you interact with the Site and Services, some of the personal information that Coursera may collect and use about you, identified in “Collection and Use of Personal Information” above, may be considered “sensitive” under applicable U.S. State Privacy Laws in certain circumstances:

• Government ID (e.g. driver’s license, state identification card, or passport number);
• Account log-in, debit or credit card number, and the means to access the account (security or access code, password, credentials, etc.);
• Demographic information (e.g. racial or ethnic origin);
• Biometrics information processed for identification purposes;
• Health related information (e.g. you may voluntarily provide certain limited health information when you engage with our Services).

We only use or disclose sensitive personal information for the following purposes:

• Perform the services or provide the goods you reasonably expect;
• To prevent, detect, and investigate security incidents;
• To resist malicious, deceptive, fraudulent, or illegal actions directed at Coursera and to prosecute those responsible for those actions;
• To ensure the physical safety of natural persons;
• For short-term, transient use, including, but not limited to, non-personalized advertising;
• To perform services on behalf of Coursera;
• To verify or maintain the quality or safety of a product, service, or device that is owned, manufactured, manufactured for, or controlled by Coursera, and to improve, upgrade, or enhance the service or device that is owned, manufactured by, manufactured for, or controlled by Coursera;
• To collect or process sensitive personal information where such collection or processing is not used for the purpose of inferring characteristics about you;
• Other activities in accordance with new or additional regulations that may be issued pursuant to applicable U.S. State Privacy laws.

Where required under applicable U.S. State Privacy laws or other applicable legislation, we will (i) request your consent, or (ii) provide you with the opportunity to opt-out, in each case (i) and (ii), for our collection and use of sensitive personal information for the purposes listed above or other purposes that are communicated to you at the time that consent is requested.

Disclosure of Personal Information

We may disclose the personal information identified in the “Collection and Use of Personal Information” section of this U.S. State Privacy Laws Notice to third parties as follows (depending on how and why you interact with the Site and Services):

Service Providers

We may disclose personal information to our service providers in order to have them perform services that assist us in fulfilling the purposes listed above. Our service providers provide us with a range of services including: hosting our Site, processing payments, legal, auditing and accounting professional services, postal and email delivery, conducting analysis to improve our products and Site, fulfilling requests you make, managing payments, performing identity verification, and answering your questions. We may disclose personal information to our service providers in order to improve our Site and Services, such as to identify bugs, repair errors, or ensure that services function as intended, or conduct internal research and analysis to improve our technology.

Coursera Partners

We may disclose personal information to Coursera partners (e.g. Universities, educational institutions, or industry partners) who (i) offer degree Programs hosted on the Site, in which you enroll or express an interest; or (ii) create content, programs, projects or other courses which Coursera provides on the Site and in which you enroll.

Coursera Customers

Where your access to our Services is provided to you as part of your relationship with your employer, academic institution, or corporate sponsor we may disclose to them (or an authorized entity acting on their behalf) information about your participation and learning progress on Coursera.

Advertising Partners

We may disclose limited personal information to advertising partners in order to show you advertising that is more likely to be of interest to you. You can learn more about this in the “Privacy Rights” section of this U.S. State Privacy Laws Notice and the Coursera Cookies Policy. You can opt-out of this disclosure by visiting Coursera’s Do Not Sell / Share My Personal Information link and opting out of ‘Targeting Cookies’.

Research Partners

We may share course data (including quiz or assignment submissions, grades, and Forum discussions), information about your activity on our Site, and demographic data from surveys operated by us with our partners and research institutes for research related to online education.

Other Disclosures

On an ad hoc basis as necessary, we may also disclose personal information to third parties (such as our partners, service providers, and law enforcement and government agencies) to secure our Site and Services and rights and interests of Coursera and its partners, including to detect, prevent, and investigate security incidents or violations of our Terms of Use or applicable laws, or in the context of legal proceedings. We may also disclose personal information to an acquirer, assignee, or other successor entity in connection with a sale, merger, or reorganization of all or substantially all of the equity, business, or assets of Coursera. Additionally, we disclose personal information to third parties at your direction (for example, if you choose to make your Coursera profile public, or post in a publicly-available Coursera Forum, Coursera will make the relevant Personal Information available to other users of the Site).

Retention of Personal Information

We keep your personal information for no longer than necessary for the purposes for which the personal information is collected and processed. For further information, please see the "Retention of Personal Data" section of the Coursera Privacy Notice.

Privacy Rights

You may have certain rights in respect of your personal information under applicable U.S. State Privacy Laws. You may not be discriminated against because you exercise your rights under applicable U.S. State Privacy Laws.

A summary of the rights that may be applicable to you is as follows:

Rights of access, deletion and portability

You may have the right to request access, deletion and portability in respect of your personal information.

Right of correction

You may have the right to request that inaccuracies in your personal information are corrected.

Rights to opt-out of sale/sharing of Personal Information and/or personalized/targeted advertising

You may have the right to opt-out of sales of your personal information, the right to opt-out of sharing (as the term “sharing” is defined under the CCPA) of your personal information, and/or the right to opt-out of personalized/targeted advertising.

As some U.S. State Privacy Laws define “sale” or “sharing” of personal information very broadly, we may “sell” or “share” personal information with third parties if we disclose personal information to advertising partners in order to show you advertising that is more likely to be of interest to you. The personal information disclosed for these purposes comprises identifiers (e.g. online identifiers, Internet Protocol address, device identifiers), internet or other electronic network activity information (e.g. information about your interactions with our Site/Services), and geolocation information. Further information is available in the Coursera Cookies Policy.

You can opt-out of disclosure of personal information with third parties/use of Personal Information for personalized/targeted advertising by visiting Coursera’s Do Not Sell / Share My Personal Information link and changing your preferences. Please note that you will still see non-personalized/targeted advertising (e.g. contextual advertising).

We do not sell or share personal information for any other purposes and we do not have actual knowledge that we sell, share or use for personalized/targeted advertising purposes personal information of minors under 16 years of age.

Right to Limit Use of Sensitive Personal Information

As described in the “Sensitive Personal Information Categories” section, above, we may collect, process, or disclose certain personal information that qualifies as “sensitive” personal information under applicable U.S. State Privacy Laws.

You may have the right to limit the use or disclosure of your sensitive personal information. We do not use or disclose sensitive personal information for purposes other than those listed in the “Sensitive Personal Information Categories” section above, without your consent or as permitted or required under applicable laws, so we do not offer users an ability to limit our use of sensitive personal information.

Right to opt-out of solely automated decisions / profiling producing legal or similarly significant effects

You may have the right to opt out of solely automated decisions or profiling which produces legal or similarly significant effects for individuals.

We do not undertake solely automated decisions or profiling which produces legal or similarly significant effects for individuals, so no opt-out is currently offered.

Exercising your rights

You can make privacy requests as follows (depending on the right you are seeking to exercise):

• Log-in to your Coursera account to view or edit your profile details, use our self-serve access tool, or use our self-serve deletion tool;
• Use Coursera’s Do Not Sell / Share My Personal Information link and opt out of ‘Targeting Cookies’, to opt-out of disclosures/use of personal information for targeted/personalized advertising purposes. We also process opt-out requests submitted using an opt-out preference signal as required by applicable law. For example, when we detect the Global Privacy Control (“GPC”) signal from a browser, we treat the signal as a request to opt out of sale and sharing of personal information associated with that browser. You may learn how to set up GPC by visiting https://globalprivacycontrol.org/. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use to visit our Site.; or
• Send an email to privacy@coursera.org with details of your specific request.

We may ask that you provide certain information to verify your identity, and the information we request from you will depend on your prior interactions with us and the sensitivity of the personal information at issue. Once confirmed, we will respond to your request in accordance with the applicable U.S. State Privacy Law. If we deny your request, we will explain why. Under some U.S. State Privacy Laws, you may designate an authorized agent to make certain requests on your behalf. However, we may need to verify your authorized agent’s identity and authority to act on your behalf. We may require a copy of a valid power of attorney given to your authorized agent pursuant to applicable law. If you have not provided your agent with such a power of attorney, we may ask you to take additional steps permitted by law to verify that your request is authorized, such as by providing your agent with written and signed permission to exercise your U.S. State Privacy Laws rights on your behalf, the information we request to verify your identity, and confirmation that you have given the authorized agent permission to submit the request.

Right to appeal

You may have the right to appeal a Coursera decision in respect of your privacy rights. To appeal a decision, send an email to privacy@coursera.org with details of your original request and appeal.

Notice of Financial Incentives

We offer programs that may constitute a “financial incentive” or a “bona fide loyalty program benefit” under applicable U.S. State Privacy Laws. The details of these programs are described in the table below and are subject to change. Please note:

• You may have the right to withdraw from these programs at any time and may do so by following the instructions in the table below.

• The value of the incentives provided pursuant to the programs depends on various factors, including as applicable: the benefit and insights that we realize and expect to realize when you continue to use our services; sales directly or indirectly generated from participation in each program; whether the sales generated by the program exceed the cost to us of offering the program; how many users sign up for the program; and increased goodwill towards us.

• We may share the personal information detailed in the table below with our service providers and relevant program partners, and as otherwise detailed in the Coursera Privacy Notice. We will not provide the personal information we collect through the programs below to data brokers. If you submit a valid request that we delete your personal information, you may no longer receive the promotion under the relevant program(s) because we may not be able to identify you to provide the promotion.

Shine the Light

Under California’s "Shine the Light" law, California residents who provide personal information in obtaining products or services for personal, family, or household use are entitled to request and obtain from us, once a calendar year, information about the customer information we shared, if any, with other businesses for their own direct marketing uses. If applicable, this information would include the categories of customer information and the names and addresses of those businesses with which we shared customer information for the immediately prior calendar year (e.g. requests made in 2025 will receive information regarding 2024 sharing activities).

To obtain this information, please send an email to privacy@coursera.org with "Request for California Privacy Information" on the subject line and in the body of your message. We will provide the requested information to you at your email address in response. Please be aware that not all information sharing is covered by the "Shine the Light" requirements and only information on covered sharing will be included in our response.

Revisions

Below is a list of all the revisions made to the content of our U.S. State Privacy Laws Notice (formerly titled "California Consumer Privacy Act Notice"), with links to view the difference between each revision.

• 2025-01-01: Updated to include a notice of financial incentives, reflect requirements of recently implemented state consumer privacy laws, and move the Shine the Light provision from the Privacy Notice to the U.S. State Privacy Laws Notice.
• 2024-01-01: Updated to reflect requirements of Utah Consumer Privacy Act.
• 2023-06-30: Updated to (a) reflect additional requirements of CCPA, as amended by CPRA, and other U.S. State Privacy Law requirements; (b) summarize/link to other key privacy information, already provided in the Coursera Privacy Notice and the Coursera Cookies Policy; and (c) improve formatting of information provided.
• 2020-12-18: Updated for clarity and to give additional details on the rights of California residents