Strong privacy practices are instrumental in fostering trust between technology companies and users. When users feel the privacy of their data is protected, they feel more confident about using digital technologies. To this end, Zoom’s privacy, product, and engineering teams have been laser-focused on developing easy-to-use solutions for users to control their privacy preferences. These efforts have resulted in a range of tools and features that allow users to easily manage their data and empower them to take ownership of their privacy.
Today, Zoom introduced several new measures to give users more control and insight into their data:
- EEA-based Data Storage: Paid customers based in the European Economic Area (EEA) will be able to select certain data for Meetings, Webinars, and Team Chat to be stored within the EEA going forward. By offering local data storage, Zoom will provide these customers with the confidence that their eligible data is stored within EEA boundaries. This data will only be shared with US teams in individual cases and exceptional circumstances, such as with Zoom’s Trust & Safety team.
- European Support Team: Zoom has established a dedicated support team within Europe, allowing customers who opt in to receive direct technical support. All support information will be processed within the EEA by local employees during normal business hours.
- Data Subject Access Requests: Zoom has developed a new tool for administrators to easily reply to data subject requests for access or deletion of their personal data for Zoom Meetings, Webinars, and Team Chat. This tool facilitates compliance with GDPR and CCPA requests.
- Marketing Preference Centre: Users may opt in or out of Zoom marketing communications and newsletters with just one click.
- Audit Log Tracking: Administrator audit logs record the specific actions that administrators take on behalf of users. Now, account owners and administrators have the ability to track when these logs are exported or deleted.
- Data Retention: Users will have more visibility into Zoom’s data retention and deletion policies as well as the standards and actions the company is taking to align with policies.
“We’re proud to announce these privacy updates for our customers,” said Lynn Haaland, Chief Compliance, Ethics, & Privacy Officer and Deputy General Counsel at Zoom. “These new tools offer our European customers more control over where their data is processed and stored, along with the option to delete personal data. Institutions can choose us knowing that they’ve selected a vendor that’s committed to protecting their data.”
Collaboration is key
Zoom’s new privacy features were developed as part of its close relationship with SURF, the collaborative organisation for ICT in Dutch education and research. In 2021, Zoom began working with SURF in response to a Data Protection Impact Assessment (DPIA). As a result, Zoom is making great strides in privacy for its users; many of these new features are a direct result of this close collaboration.
“We are pleased with the adjustments Zoom has made to its software as a result of our collaboration,” said Jet de Ranitz, CEO and chairperson of SURF’s board of directors. “With Zoom’s new privacy features and recent modifications, the company has showcased a commitment to European privacy standards. We are very happy with the outcome and the positive benefits for European users.”
Where can you find the new settings?
Zoom’s new tools for data subject access requests and data deletion are available in the Zoom web portal, under “Privacy.” The Marketing Preference Centre can also be accessed through the “Manage Preferences” link within Zoom marketing emails, and European technical support is also available at https://eu.support.zoom.us. For EEA-based paid customers, Zoom also began rolling out the ability to enable EEA-based data storage in the Zoom Privacy Centre. Zoom’s data retention and deletion policies can be found in the company’s privacy sheet.
For more details on Zoom’s approach to privacy and security, please visit the Zoom Trust Centre.
Discussion about this post