Jurisdiction-Specific Privacy Supplements
Notice of Your California Privacy Rights
California Residents—Your Privacy Rights: California law (California Civil Code Section 1798.83) permits residents of California to opt out of College Board disclosure of personally identifiable information to third parties for marketing purposes at any time. College Board will not disclose your personally identifiable information to third parties for marketing without giving you notice and getting your consent. Please note—this opt-out doesn’t prohibit disclosures for non-marketing purposes. You can opt out for free by contacting us or writing to:
College Board
11955 Democracy Drive
Reston, VA 20190
Attention: Student Search Service
Please note that College Board is not subject to the California Consumer Privacy Act (CCPA) or the California Privacy Rights Act (CPRA) as a nonprofit organization.
California Do Not Track Disclosure
Some browsers may be able to send a do not track signal to websites. The College Board site does not respond to do not track signals or similar mechanisms and requests.
State Consumer Privacy Laws Supplemental Privacy Notice
This supplemental privacy notice gives residents of certain states additional information required by their applicable consumer privacy laws, a current list of which is available on our Privacy Center. These provisions, together with the statements in the College Board privacy notices, explain our practices for processing residents’ personal data to the extent their state’s consumer privacy law applies. If there are material changes to the Privacy Statement or its State Consumer Privacy Laws Supplemental Privacy Notice, we will contact those as required by their state laws using their College Board account email address.
Sensitive Data: College Board may collect and process certain information defined as sensitive under applicable states laws. This may include your race and ethnicity to provide and personalize our programs and services and conduct research consistent with our mission, mental or physical health condition or diagnosis to process your request for testing accommodations, citizenship to process your CSS Profile application, and data about individuals under age 13 to provide programs requested by them. Further specificity on processing purposes for sensitive data will be provided to you through informed, express consent for any such processing as required by law. You may have the right to opt-out of the processing of sensitive data as part of our consumer programs and services, which you may do through our Consent Management Preferences Center at my.collegeboard.org/profile/privacy.
Your Rights: College Board respects your right to access, correct, and request deletion of your personally identifiable information and to portability of it as required by law. Depending on where you live, this means:
- You have a right to know if College Board maintains your personally identifiable information. If we do, you have the right to access it and request that we provide you a copy of your information (subject to the rights of others) in a portable, and, to the extent technically feasible, readily usable format that allows you to transmit it to another entity.
- If your information is inaccurate, you have the right to ask us to update it.
- You may ask us to delete your personally identifiable information.
- You may ask us to identify third parties or categories of third parties to whom data may have been provided.
To exercise these rights, please complete the Your Privacy Choices webform, email us at [email protected], or write to us at the U.S. address provided in this Privacy Statement and our Customer Service team will assist you. You may also go to my.collegeboard.org/profile to access and correct certain personal data. Our ability to delete personal information will be limited when we’re required to retain records, as in connection with score reports and test security processes.
While not the “sale” of data as defined under otherwise applicable state consumer privacy laws, College Board also respects your right to opt out of Student Search Service (Search). You can opt out of Search at any time by submitting the Your Privacy Choices webform, going to my.collegeboard.org/profile/privacy, contacting us at 866-825-8051, or emailing us at [email protected].
You may authorize someone to act on your behalf to exercise these rights, using the same methods described above. We may need to verify your identity, and any authorized agent authorized by you to act on your behalf, before we can process your request. College Board’s process to authenticate identity includes name, date of birth, and security phrase or security questions, as well as further validation processes, if necessary, including use of the phone number associated with the account.
If College Board does not take the action you requested when exercising these rights, you may appeal such inaction within a reasonable period after we have notified you of our denial of your request. To submit your appeal, please complete the Your Privacy Choices webform, email us at [email protected], or write to us at the U.S. address provided in this Privacy Statement.
Marketing Cookies: When you visit our website and with your consent, we place cookies on your computer. While College Board does not use data for targeted advertising as defined by state consumer privacy laws otherwise applicable to College Board, for convenience visitors to our site from certain states can opt out of cookies for nonessential website purposes when they first access our site, including marketing cookies. You may exercise your right to opt out of processing personal data for marketing cookies by clicking on the link “Cookie Settings and Your Opt-Out Rights” and then “Marketing Cookies,” presented as a banner when you visit our website. Please see the Cookies and Website Usage for more information about cookies and similar technologies.
EEA, UK and Brazil Supplemental Privacy Notice
This supplemental privacy notice gives those located in the European Economic Area (EEA), United Kingdom (UK), and Brazilian residents additional information required by local law. These provisions, together with the statements in the College Board privacy notices, explain our practices for processing EEA, UK, and Brazilian residents’ personal data.
Cookies: Visitors to our site from the EEA, UK and Brazil can opt out of cookies for nonessential website purposes when they first access our site. When you visit our website and with your consent, we place cookies on your computer. Please see the Cookies and Website Usage for more information about cookies and similar technologies.
This EEA, UK and Brazil Privacy Notice explains why we collect your personally identifiable information and how we process it. When necessary, we collect and process your information per the lawful bases described below:
- To fulfill a contract with you, for instance to provide a College Board test or a test offered by another company on behalf of College Board.
- We may provide personally identifiable information to our operational third parties (processors) and other trusted businesses or persons to process it for us, based on our written instructions and in compliance with our Privacy Statement and any other appropriate confidentiality and security measures. For example, we use service providers to help process and score our tests.
- To process a payment, to create an account on our website, and for website management.
We may also process your personally identifiable information with your consent to send you optional email communications, enroll you in Student Search Service, or send your scores to your designated recipients.
We may also process your personally identifiable information for the purposes of our legitimate interests, if processing it doesn’t outweigh your rights and freedoms. We may process your personal information as needed to:
- Protect you, us, or others from threats (such as test security, security threats, or test fraud).
- Improve College Board tests and support College Board research initiatives.
- Enable or administer our business, such as for quality control, consolidated reporting, and customer service.
- Manage corporate transactions, such as mergers or acquisitions.
- Understand and improve our business, improve test integrity, and for research purposes.
We may also process your personally identifiable information to comply with applicable laws.
Automated Decision Making and Profiling: College Board may use automated processes in connection with scoring tests and for similar purposes, as needed to provide the test services you have requested, and for fraud prevention related to test security. All of these decisions are subject to human review. We will not make automated decisions about you that may significantly affect you, unless (a) the decision is necessary as part of a contract we have with you, (b) we have your explicit consent, or (c) we’re required by law to use the technology. You can learn more about test scoring by reading the information posted on our website about each of our tests. You can learn more about test security by reading the information posted on our website.
In some cases, we use certain elements of personal data for College Board research. For example, we may consider how certain types of test takers (such as non-native English speakers) respond to specific test questions. Our research initiatives reflect our commitment to fairness and equity in testing, helping to ensure that our tests are accessible and free from bias. They also aim to improve teaching, learning, and assessment. Our research results do not contain any identifiable data and aren’t used to target or profile individuals. Visit research.collegeboard.org to learn more.
Your Rights: As stated in this EEA, UK and Brazil Privacy Notice, you always have the right to object to our optional email communications. To opt out of these emails, click the Unsubscribe link at the bottom of any email we send you. And see the sections above related to communications and engagement for information about your choices and opting out.
College Board also respects your right to access, correct, and request erasure or restriction of your personally identifiable information as required by law. This means:
- You have a right to know if College Board maintains your personally identifiable information. If we do, we’ll give you a copy (subject to the rights of others). If your information is incorrect or incomplete, you have the right to ask us to update it.
- You have the right to object to our processing of your personally identifiable information.
You may also ask us to delete or restrict your personally identifiable information, including a copy of your information related to your right to data portability.
To exercise these rights, please complete the Your Privacy Choices webform, email us at [email protected], or write to us at the U.S. address provided in this Privacy Statement and our Customer Service team will assist you (we may need to verify your identity before we can process your request). Our ability to delete personal information will be limited when we’re required to retain records, as in connection with score reports and test security processes.
If you believe we have processed your personally identifiable information in violation of applicable law, you can file a complaint with the College Board Chief Privacy Officer by emailing [email protected] or with a supervisory authority.
Data Retention: We’ll retain your personally identifiable information for as long as the information is needed for the purposes detailed above and for any additional period that may be required or permitted by law. You may request that we delete your personally identifiable information by completing the Your Privacy Choices webform or emailing us at [email protected]. Unless we’re required by law to retain your information or have a legitimate interest in retaining it, we’ll delete it within 30 days of your request. If you ask us to delete your data you won’t be able to access any College Board account or test scores or send test scores to any colleges, universities, or any other third parties.