For VitalSource—and our educational and large business customers—data privacy and security has always been a priority. Our goal is to provide our customers with the tools to support our mutual commitment to user privacy.
As a global company with users in over 240 countries, we monitor and support dozens of privacy regulations. To learn more about how we support privacy regulations in your region, see the Global Regulations section below.
Do you ever sell user data?
Do you transfer user data?
What kind of data are you collecting?
To comply with student data regulations in British Columbia and Nova Scotia, we can deploy our zero-data (PII) integration. If your institution uses our platform for Inclusive Access, we host your PII in Canada.
In the US, Verba and VitalSource power hundreds of Inclusive Access programs, wherein students gain access to their required course materials on or before the first day of class. The following is a summary of how we handle student privacy in Inclusive Access scenarios within the US.
To power your Inclusive Access program, Verba Connect needs the following data for each student enrolled in each Inclusive Access course:
A student, or the student’s institution, may provide this data. If a student already has a VitalSource Bookshelf account, that student can use that account to participate in Inclusive Access.
How We Use Student Data
Verba Connect uses student data to provide the Inclusive Access program, including:
Student Data and Third Parties
Verba shares limited student data with publishers and content distributors for the sole purpose of providing access to Inclusive Access course materials, or revoking such access if a student drops a course. A publisher or content distributor only receives data for students enrolled in courses in which its content is being used.
How We Handle Family Educational Rights and Privacy Act (FERPA)
FERPA is a law that allows an institution to disclose Personally Identifiable Information (PII) from a student’s education records to others under certain circumstances, including (but not limited to) disclosing:
FERPA permits third parties with legitimate educational interests who receive such PII to re-disclose that information to additional third parties who also have a legitimate educational interest in the information.
Disclosing Student Data to Verba
Verba provides student access to course materials. Under FERPA, institutions may disclose student data to Verba, as Verba has a legitimate educational interest in receiving that information to facilitate this access and provide its services to institutions and their students. When Verba receives PII from an institution, Verba uses such data for purposes of providing its services to institutions and students, and only discloses such information as permitted under FERPA.