Last updated June 14, 2024
Law School Admission Council, Inc. and its affiliates (collectively, “LSAC,” “we”, “our” or “us”) are committed to privacy and to transparency in our information practices. In this Colorado Privacy Notice Supplement (“Colorado Supplement”), we provide additional notices to supplement the information in the LSAC Privacy Notice. This Colorado Supplement is subject to the LSAC Privacy Notice and is incorporated by reference as a supplement thereto.
To fully understand how we collect, use, disclose, and process your Personal Information (as defined in the LSAC Privacy Notice) that we collect in relation to our Services, this Colorado Supplement should be read in conjunction with the LSAC Privacy Notice. Capitalized terms used in this Colorado Supplement, which are not otherwise defined, have the meanings assigned to them in the LSAC Privacy Notice.
PI “Selling” and Targeted Advertising
Under Colorado law, some of LSAC’s activities may be considered a “sale” of your Personal Information. When you create your JD Online account or participate in our CRS or CAS services, we may “sell” your Personal Information if you provide your consent for us to do so. You may withdraw your consent at any time by following the instructions described in the Opting out of JD Online account, CRS, and CAS Data Sharing section of the LSAC Privacy Notice.
Categories of Personal Information that we may “sell” with your consent when you create your JD Online account or participate in our CRS or CAS services include but are not limited to name and contact information, State of permanent residence, gender identity, education history, employment information, law school preferences, and information you may voluntarily submit to us, which may be considered sensitive information under some laws, such as information about race, ethnicity, country of citizenship, status as transgender or nonbinary, and status as a part of the LGBTQ+ Community.
Additionally, when you visit our Websites or use our online Services, as described in the LSAC Privacy Notice, we may disclose with your consent Personal Information from cookies to third parties that provide analytics services and serve advertisements on our behalf across the internet and in applications; this may also be considered a “sale” of your Personal Information under Colorado law. If you provide your consent for us to “sell” your Personal Information to third-party advertisers, you may withdraw your consent at any time by reviewing your cookie consent settings.
Your Rights
If you are a resident of Colorado acting only in an individual or household context, the Colorado Privacy Act permits you to request the following from us:
- disclosure of Personal Information about you that we have collected and maintain;
- the right to opt-out of:
- the sale of Personal Information;
- targeted advertising online; and
- profiling in furtherance of decisions that produce legal or similarly significant effects;
- the right to obtain your Personal Information in a portable and, to the extent technically feasible, readily usable format (limited to a maximum of two (2) requests per calendar year);
- deletion of your Personal Information; and
- correction of inaccurate Personal Information.
These rights are subject to certain limitations. You have the right not to face discrimination for exercising any of your rights under the Colorado Privacy Act.
When you would like to exercise your rights, please send your request using our contact information in the LSAC Privacy Notice. Please note that we may need you to provide additional information to confirm your identity.
We will use the following process to verify, process, and respond to requests: We will acknowledge receipt of your request, verify it using processes required by law, then process and respond to your request as required by law. To verify such requests, we may ask you to provide the following information:
- For a request to know categories of Personal Information which we collect or a request to exercise your opt-out rights, as described above, we will verify your identity to a reasonable degree of certainty by matching at least two data points provided by you against information in our systems which are considered reasonably reliable for the purposes of verifying a consumer’s identity.
- For a request to know or obtain specific pieces of Personal Information or for requests to delete or correct your Personal Information, we will verify your identity to a high degree of certainty by matching at least three pieces of Personal Information provided by you to Personal Information maintained in our systems and also by obtaining a signed declaration under penalty of perjury that you are the consumer whose Personal Information is the subject of the request.
Authorized agent requests: An authorized agent can make a request on a Colorado resident’s behalf to exercise any of the opt-out rights described above by providing a power of attorney valid under Colorado law, or providing: (1) proof that the Colorado resident authorized the agent to do so; (2) verification of the authorized agent’s own identity; and (3) direct confirmation that the Colorado resident provided the authorized agent permission to submit the request.
We will respond to verifiable requests as required by law. If we are unable to verify your request using commercially reasonable efforts, we will inform you that your identity could not be verified and will provide information on how to remedy any deficiencies. You can also contact us if you have any questions, remarks, or complaints in relation to this Colorado Supplement. If we decide not to act on your request, we will explain the reasons for denial and will provide instructions on how to appeal our decision. Appeals may be submitted using our contact information in the LSAC Privacy Notice.