The unbearable lightness of consent: Mapping MOOC providers’ response to consent
1. Mapping MOOC
providers’ response to
consent
Mohammad Khalil
Delft University of
Technology, NL
Paul Prinsloo
University of South
Africa, SA
Sharon Slade
Open University,
UK
Consent
6. “Any information relating to an identified
natural person such as name, location data,
identification number… -GDPR
6
CC0
7. ““Personal data about learning behavior may be
viewed as particularly sensitive…..combined with
data analytics, they might also be used to predict
professional future and career opportunities (p.2)”
– International Working Group on Data Protection
7
CC0
11. 11
The Study Questions:
CC0
Q1: How is ‘personal data’ defined, is ‘sensitive data’
acknowledged?
Q2: Is student consent addressed?
Q3: Is student data ‘used’ to personalize or intervene?
16. Documents analyzed
-Terms of Use
-Privacy Policy
-Terms of Use
-Privacy Policy
-Terms of Service
& Honor Code
-Privacy Policy
-Accessibility &
inclusion, Cookie,
Data protection,
Terms and
Conditions, Research
ethics
Total: 37k words, 120 pages
22. • ‘Photo’ was mentioned in edX
• The only provider that mentioned ‘sensitive data’ is Coursera
• Intervention was not found in any of the policies nor in TOC
• ‘individualization’, ‘recommendation’, ‘personalization’, ‘adapt’ were used as a
broad equivalent to interventions
• ‘agree’, ‘opt in/out’, ‘accept’, ‘authorize’ were used as synonyms for consent
24. In terms of Personal Data
All MOOC providers use name, email, forum posts, shared and generated content,
and IP as personal data.
edX defined PI as “any information about yourself that you may provide to us”.
DOB, occupation, patterns of learning, 3rd party info, etc. are collected and may be
used.
Coursera includes the above-mentioned data + sample of typing patterns, login
from third party website information.
25. Use of student data were given as: course improvements, authentication,
research purposes, progress and completion, & third party sharing.
In terms of Personal Data
iversity focused more on mining the linkaged data from Facebook.
FutureLearn appears to collect less personal info than the US provdiers.
FutureLearn gives you the right to opt out from being tracked by the Google
Analytics service.
Overall
26. Opting not to provide certain information prohibit you from using MOOC services
In terms of Consent
If you do not agree, then please do not access, browse, or
register for the site - edX
Coursera offers students to opt out of using personal data
27. The extent to which use of data leads to personalization is not always made clear
In terms of Intervention
Non-course specific data like Facebook likes remains unclear!
31. “
31
Conclusion
Operational use of student data has largely not been considered
Opting out remains severely constrained
Initial consent does not provide a blank cheque to harvest personal data