Is it normal for coding bootcamp to request the following?

I can give my two cents opinion as an operator from that point of view: 1. Emergency contact - yes, if you disappear we want to try to find you and make sure everything is ok. People do have emergencies, and it's not often, but it's helpful to have this when it does happen and it's not super invasive. 2. SSN - I would only give this to an institution with PCI compliance. i.e. a bank or financial institution asking on behalf of the bootcamp. It's not really necessary for the program to have this directly. 3. Rights to use picture - yeah this is very normal, and the reason is to have legal permission to do so if you happen to be in a screenshot or something. I would HOPE the program would ask you first for your permission because contract aside, they want to have a mutually trusting relationship, but it's very common to see this kind of clause.