Frequently Asked Questions (FAQs) about Data Protection

1. What is GDPR?
   The term “GDPR” refers to the General Data Protection Regulation, a European Union (EU) and United Kingdom (UK) law about data privacy and security. Among other things, it regulates the international transfer of personal information across EU borders and establishes certain individual rights relative to personal information.
2. What is “CCPA”?
   

   The term “CCPA” refers to the California Consumer Privacy Act of 2018, a U.S. privacy law that governs the collection and processing of California consumers’ personal information by businesses and, amongst other things, secures privacy rights for California consumers.

3. What data does edX have about me?
   

   The information collected from users and visitors to edx.org is described in the Privacy Policy (under the heading “Information That edX Collects From and About You (including Personal Information)”). 

   Much of the information that edX stores about you is available via your edX account. This includes your profile information, account settings, and your dashboard. The dashboard lists all current and archived courses in which you are enrolled and includes links to any course and program certificates you may have earned. Through the dashboard, you can also access the course content and view your work and performance on assessments and your posts in public forum discussions. If you need assistance locating any of the information available via your edX account, please let us know.

   As explained in the edX Cookie Policy, cookies and other similar tracking technologies are also used to track information about your activity on the edX website (for example, which pages were visited). Please read the “Types of Cookies Used by edX” section of the Cookie Policy for more information on the different types of cookies used and their purpose(s).

4. Does edX collect biometric data?
   At this point neither edX nor any of our data processing vendors collect any data or conducts any specific technical processing (e.g., no 3D faceprint technology) that would qualify as biometric, except with respect to certain courses where facial recognition is used for identity verification where the Member has required that exams have remote proctoring. Learners are asked for specific consent for remote proctoring in applicable courses.
5. Does edX sell or give my personal information to advertisers?
   As described in the edX Privacy Policy and Cookie Policy, in some cases, we disclose Identifiers and Usage Data to business partners in order to deliver ads that are more relevant to you and to measure and report on the effectiveness of our advertising campaigns. Under the CCPA, some of these data disclosures may be broadly considered a “sale” or “share” of information, even though these activities do not fit what most people would understand “sale” or “share” to mean. Except for these types of disclosures, we do not sell or share your information. To opt out of the sale or share of your personal information, please visit the “Your Privacy Choices” link at the bottom of each page on the edX site.
    
6. How do I get removed from the edX marketing lists?
   When you first create an account on edX, you will receive a welcome email that contains links for unsubscribing from edX marketing emails and updating subscription preferences. All further marketing email you receive from us will contain unsubscribe links. You may also contact our support team for help.
   
   
7. Can I ask edX to delete my account and personal data?
   Yes, you may request that your edX account and personal information be deleted by clicking the“Delete my account” button in your edX account settings. You can learn more about account and data deletion at the edX Help Center page for Account Deletion FAQs.