What is GDPR? The term “GDPR” refers to the General Data Protection Regulation, a European Union (EU) law about data privacy and security. Among other things, it regulates the transfer of personal information across EU borders and establishes certain individual rights relative to personal information. It was passed by the EU in 2016 and is effective as of May 25, 2018.
Does edX have to comply with GDPR? Like many US-based organizations, edX is making a good faith effort to comply, given our global reach with learners and partners.
Does edX participate in Privacy Shield? Privacy Shield is a voluntary program sponsored by the US government as a way for US-based entities to self-certify to EU partners that they can lawfully receive transfers of EU personal information. The program is administered by the U.S. Department of Commerce and enforced by the FTC (Federal Trade Commission), and only entities that are regulated by FTC are eligible to participate. Because FTC does not regulate nonprofit organizations like edX, we are not eligible to participate in Privacy Shield.
Much of the information that edX stores about you is available via your edX account. This includes your profile information, account settings, and your dashboard. The dashboard lists all current and archived courses in which you are enrolled and includes links to any course and program certificates you may have earned. Through the dashboard, you can also access the course content and view your work and performance on assessments and your posts in public forum discussions. If you need assistance locating any of the information available via your edX account, please let us know.
Does edX collect biometric data? No, at this point neither edX nor any of our data processing vendors collects any data or conducts any specific technical processing (e.g., no 3D faceprint technology) of any photos or videos (including remote proctoring) that would qualify as biometric.
How do I get removed from the edX marketing lists? When you first create an account on edX, you will receive a welcome email that contains links for unsubscribing from edX marketing emails and updating subscription preferences. All further marketing email you receive from us will contain unsubscribe links. You may also contact our support team for help.
Can I ask edX to delete my account and personal data? Yes, the edX platform is being updated to add a “delete my account” button to the learner account settings. You can learn more about account and data deletion at the edX Help Center page for Account Deletion FAQs.
Where do I go if I have more questions about edX’s privacy practices? We welcome additional questions at firstname.lastname@example.org. Thank you for your interest in edX!