{"id":1779,"date":"2020-04-21T16:01:00","date_gmt":"2020-04-21T15:01:00","guid":{"rendered":"https:\/\/www.calligo.io\/zoom-data-privacy-lawsuit-what-you-need-to-know\/"},"modified":"2024-01-18T14:40:57","modified_gmt":"2024-01-18T14:40:57","slug":"zoom-data-privacy-lawsuit-what-you-need-to-know","status":"publish","type":"post","link":"https:\/\/www.calligo.io\/insights\/glossary\/zoom-data-privacy-lawsuit-what-you-need-to-know\/","title":{"rendered":"Zoom data privacy lawsuit \u2013 what you need to know"},"content":{"rendered":"\n

Jennifer Wu, J.D., CIPP.C, CIPM, one of our data privacy consultants, was recently asked by CMSWire to weigh in on the Zoom privacy discussion. You can read a short extract of Jen\u2019s comments in <\/em>the full CMSWire article here<\/em><\/a>, while the blog below contains our fuller observations. <\/em><\/p>\n\n\n\n\n\n\n\n

Zoom\u2019s rapid growth throughout COVID-19<\/h2>\n\n\n\n

Prior to March 2020, Zoom was an app only a relative few had heard of \u2014 the video conferencing app had about 10 million daily users in December. By April, it was up to 200 million daily users.<\/p>\n\n\n\n

Financial news site Learnbonds<\/a> showed an increase in Zoom downloads of 1,270% on mobile platforms (Android and iOS) alone between 22 February and 22 March. For a brief moment, Zoom was the most-downloaded app in the Apple app store.<\/p>\n\n\n\n

Zoom CEO Eric Yuan was making the most of the sudden demand for conferencing software with seemingly benevolent actions, such as removing the 40-minute time limit on free meetings, first in China and later in other affected regions as the COVID-19 pandemic spread across the world, and more and more students, teachers and other workers became reliant on remote conferencing.<\/p>\n\n\n\n

Stark privacy and security issues make the headlines<\/h2>\n\n\n\n

But throughout all those downloads by all those users, a fatal flaw has been exposed: its security was nowhere near as advertised. Not long after Zoom became a household name, so did \u201cZoombombing\u201d: the name given to hackers taking over Zoom chats and often showing pornography or other distasteful images.<\/p>\n\n\n\n

By late March, word was out that Zoom was sharing user data with Facebook, and the New York attorney general<\/a> sent a letter to Zoom, questioning the security practices it had in place to ensure user privacy.<\/p>\n\n\n\n

Shortly after, the first of several class-action lawsuits was filed against the company, alleging the firm did not adhere to California\u2019s Consumer Privacy Act (CCPA), which is similar to the E.U.\u2019s General Data Protection Regulation (GDPR). The suit stated that by not obtaining proper consent from its users about its transfer of their data to Facebook, Zoom was in violation of the CCPA.<\/p>\n\n\n\n

\n

\u201cZoom is using its own definition of the term, one that lets Zoom itself access unencrypted video and audio from meetings.\u201d<\/p>\n<\/blockquote>\n\n\n\n

Further investigation by investigative site The Intercept<\/a> revealed that, contrary to its advertising, Zoom did not use end-to-end encryption, which protects internet communication from all outside parties. The Intercept reported that \u201cZoom is using its own definition of the term, one that lets Zoom itself access unencrypted video and audio from meetings.\u201d<\/p>\n\n\n\n

Eric Yuan responded quickly, issuing an apology in a\u00a0public blog post<\/a>, clarifying the company\u2019s security policies and vowing to put a freeze on new feature development, \u201cshifting all our engineering resources to focus on our biggest trust, safety, and privacy issues.\u201d<\/p>\n\n\n\n

However, it may be too little too late as Zoom\u2019s reputation has taken a hit. There are now four class-action lawsuits against the company, and Yuan has issued multiple public apologies \u2013 but the damage has been done.<\/p>\n\n\n\n

Elon Musk\u2019s SpaceX banned Zoom, citing privacy and security concerns, as have the German government, the Singapore Ministry of Education and the U.S. Senate, to name just a few.<\/p>\n\n\n\n

Data privacy and security concerns predate the pandemic<\/h2>\n\n\n\n

Zoom\u2019s security issues, however, are not new, and are not simply the problems of a start-up rushing to fulfil the needs of an unprecedented number of users. The security flaws in Zoom\u2019s software go back as far as last year, when a security researcher named Jonathan Leitschuh publicly posted on Medium<\/a> that he had discovered a vulnerability that would allow someone else to hijack the webcam on Mac computers, allowing them to to turn on the webcam and force the user to join a Zoom call without permission.<\/p>\n\n\n\n

That discovery, said Leitschuch, was reported to Zoom on 26 March 2019. On 9 July, Zoom reported they would have a fix patching the vulnerability, and assured users they would update the application to further protect users\u2019 privacy.<\/p>\n\n\n\n

Although the privacy concerns cited in Robert Cullen\u2019s famous 30 March 2020 lawsuit<\/a> and  potential class action are different ones, the fact is that issues remain. Perhaps then, for users of Zoom software, it is worth contemplating whether its business standards and ethics are in line with those of your company.<\/p>\n\n\n\n

Data Protection Advice<\/h2>\n\n\n\n

It is always necessary to examine the security practices of a company you are doing business with to determine if it meshes with your own best practices and the compliance regulations of the region in which you operate.<\/p>\n\n\n\n

Jennifer Wu<\/a>, one of Calligo data privacy consultants, told CMSWire<\/a> that \u201cduring the initial evaluation of a tool like Zoom, ask for a Data Protection Agreement, or a similar document. This is something that is required if a company falls under the jurisdiction of the GDPR or CCPA. If your company decides it does not live up to required technical and organisational measures, there is no need to spend further time assessing the tool\u2019s features.\u201d<\/p>\n\n\n\n

Wu warns caution, however, as Zoom proves that not all companies are transparent regarding their security measures, and says that it is essential to know what questions to ask. \u201cAs we have discovered with Zoom,\u201d she told CMSWire, \u201conce asked to clarify, they confirmed that end-to- end encryption was not available. If this was relevant to your company, their previous privacy policy did not tell you that.\u201d<\/p>\n\n\n\n

Data privacy is critical in the best of times. In today\u2019s troubled times, when hackers are seeking to take advantage of an increasingly remote population, even more so. When in doubt, consult with data privacy experts<\/a> and read the fine print. Be sure you know your data is in the right hands.<\/p>\n","protected":false},"excerpt":{"rendered":"

Calligo’s data privacy experts provide their observations regarding the data privacy concerns surrounding video-conferencing tool, Zoom.<\/p>\n","protected":false},"author":33,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[140,121],"tags":[],"post_format_type":[40],"class_list":["post-1779","post","type-post","status-publish","format-standard","hentry","category-data-privacy-glossary","category-glossary"],"acf":[],"yoast_head":"\nZoom data privacy lawsuit \u2013 what you need to know | Calligo<\/title>\n<meta name=\"description\" content=\"Calligo's data privacy experts provide their observations regarding the data privacy concerns surrounding video-conferencing tool, Zoom.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.calligo.io\/insights\/glossary\/zoom-data-privacy-lawsuit-what-you-need-to-know\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Zoom data privacy lawsuit \u2013 what you need to know | Calligo\" \/>\n<meta property=\"og:description\" content=\"Calligo's data privacy experts provide their observations regarding the data privacy concerns surrounding video-conferencing tool, Zoom.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.calligo.io\/insights\/glossary\/zoom-data-privacy-lawsuit-what-you-need-to-know\/\" \/>\n<meta property=\"og:site_name\" content=\"Calligo\" \/>\n<meta property=\"article:published_time\" content=\"2020-04-21T15:01:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-01-18T14:40:57+00:00\" \/>\n<meta name=\"author\" content=\"Brendan Walsh\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@calligocloud\" \/>\n<meta name=\"twitter:site\" content=\"@calligocloud\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Brendan Walsh\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.calligo.io\/insights\/glossary\/zoom-data-privacy-lawsuit-what-you-need-to-know\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.calligo.io\/insights\/glossary\/zoom-data-privacy-lawsuit-what-you-need-to-know\/\"},\"author\":{\"name\":\"Brendan Walsh\",\"@id\":\"https:\/\/www.calligo.io\/#\/schema\/person\/e2e0283a3e6c3a237a10e012c081755f\"},\"headline\":\"Zoom data privacy lawsuit \u2013 what you need to know\",\"datePublished\":\"2020-04-21T15:01:00+00:00\",\"dateModified\":\"2024-01-18T14:40:57+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.calligo.io\/insights\/glossary\/zoom-data-privacy-lawsuit-what-you-need-to-know\/\"},\"wordCount\":978,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.calligo.io\/#organization\"},\"articleSection\":[\"Data Privacy\",\"Glossary\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.calligo.io\/insights\/glossary\/zoom-data-privacy-lawsuit-what-you-need-to-know\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.calligo.io\/insights\/glossary\/zoom-data-privacy-lawsuit-what-you-need-to-know\/\",\"url\":\"https:\/\/www.calligo.io\/insights\/glossary\/zoom-data-privacy-lawsuit-what-you-need-to-know\/\",\"name\":\"Zoom data privacy lawsuit \u2013 what you need to know | Calligo\",\"isPartOf\":{\"@id\":\"https:\/\/www.calligo.io\/#website\"},\"datePublished\":\"2020-04-21T15:01:00+00:00\",\"dateModified\":\"2024-01-18T14:40:57+00:00\",\"description\":\"Calligo's data privacy experts provide their observations regarding the data privacy concerns surrounding video-conferencing tool, Zoom.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.calligo.io\/insights\/glossary\/zoom-data-privacy-lawsuit-what-you-need-to-know\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.calligo.io\/insights\/glossary\/zoom-data-privacy-lawsuit-what-you-need-to-know\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.calligo.io\/insights\/glossary\/zoom-data-privacy-lawsuit-what-you-need-to-know\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.calligo.io\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Zoom data privacy lawsuit \u2013 what you need to know\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.calligo.io\/#website\",\"url\":\"https:\/\/www.calligo.io\/\",\"name\":\"Calligo\",\"description\":\"Building value through data\",\"publisher\":{\"@id\":\"https:\/\/www.calligo.io\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.calligo.io\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.calligo.io\/#organization\",\"name\":\"Calligo\",\"url\":\"https:\/\/www.calligo.io\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.calligo.io\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/calligo-og.jpg\",\"contentUrl\":\"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/calligo-og.jpg\",\"width\":1200,\"height\":630,\"caption\":\"Calligo\"},\"image\":{\"@id\":\"https:\/\/www.calligo.io\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/x.com\/calligocloud\",\"https:\/\/www.linkedin.com\/company\/calligo-limited\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.calligo.io\/#\/schema\/person\/e2e0283a3e6c3a237a10e012c081755f\",\"name\":\"Brendan Walsh\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.calligo.io\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/299d5b23f0682aabb1a2347ddf8b95df04b22cfec378aea17a8f7395c74b2bc8?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/299d5b23f0682aabb1a2347ddf8b95df04b22cfec378aea17a8f7395c74b2bc8?s=96&d=mm&r=g\",\"caption\":\"Brendan Walsh\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Zoom data privacy lawsuit \u2013 what you need to know | Calligo","description":"Calligo's data privacy experts provide their observations regarding the data privacy concerns surrounding video-conferencing tool, Zoom.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.calligo.io\/insights\/glossary\/zoom-data-privacy-lawsuit-what-you-need-to-know\/","og_locale":"en_GB","og_type":"article","og_title":"Zoom data privacy lawsuit \u2013 what you need to know | Calligo","og_description":"Calligo's data privacy experts provide their observations regarding the data privacy concerns surrounding video-conferencing tool, Zoom.","og_url":"https:\/\/www.calligo.io\/insights\/glossary\/zoom-data-privacy-lawsuit-what-you-need-to-know\/","og_site_name":"Calligo","article_published_time":"2020-04-21T15:01:00+00:00","article_modified_time":"2024-01-18T14:40:57+00:00","author":"Brendan Walsh","twitter_card":"summary_large_image","twitter_creator":"@calligocloud","twitter_site":"@calligocloud","twitter_misc":{"Written by":"Brendan Walsh","Estimated reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.calligo.io\/insights\/glossary\/zoom-data-privacy-lawsuit-what-you-need-to-know\/#article","isPartOf":{"@id":"https:\/\/www.calligo.io\/insights\/glossary\/zoom-data-privacy-lawsuit-what-you-need-to-know\/"},"author":{"name":"Brendan Walsh","@id":"https:\/\/www.calligo.io\/#\/schema\/person\/e2e0283a3e6c3a237a10e012c081755f"},"headline":"Zoom data privacy lawsuit \u2013 what you need to know","datePublished":"2020-04-21T15:01:00+00:00","dateModified":"2024-01-18T14:40:57+00:00","mainEntityOfPage":{"@id":"https:\/\/www.calligo.io\/insights\/glossary\/zoom-data-privacy-lawsuit-what-you-need-to-know\/"},"wordCount":978,"commentCount":0,"publisher":{"@id":"https:\/\/www.calligo.io\/#organization"},"articleSection":["Data Privacy","Glossary"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.calligo.io\/insights\/glossary\/zoom-data-privacy-lawsuit-what-you-need-to-know\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.calligo.io\/insights\/glossary\/zoom-data-privacy-lawsuit-what-you-need-to-know\/","url":"https:\/\/www.calligo.io\/insights\/glossary\/zoom-data-privacy-lawsuit-what-you-need-to-know\/","name":"Zoom data privacy lawsuit \u2013 what you need to know | Calligo","isPartOf":{"@id":"https:\/\/www.calligo.io\/#website"},"datePublished":"2020-04-21T15:01:00+00:00","dateModified":"2024-01-18T14:40:57+00:00","description":"Calligo's data privacy experts provide their observations regarding the data privacy concerns surrounding video-conferencing tool, Zoom.","breadcrumb":{"@id":"https:\/\/www.calligo.io\/insights\/glossary\/zoom-data-privacy-lawsuit-what-you-need-to-know\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.calligo.io\/insights\/glossary\/zoom-data-privacy-lawsuit-what-you-need-to-know\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.calligo.io\/insights\/glossary\/zoom-data-privacy-lawsuit-what-you-need-to-know\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.calligo.io\/"},{"@type":"ListItem","position":2,"name":"Zoom data privacy lawsuit \u2013 what you need to know"}]},{"@type":"WebSite","@id":"https:\/\/www.calligo.io\/#website","url":"https:\/\/www.calligo.io\/","name":"Calligo","description":"Building value through data","publisher":{"@id":"https:\/\/www.calligo.io\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.calligo.io\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/www.calligo.io\/#organization","name":"Calligo","url":"https:\/\/www.calligo.io\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.calligo.io\/#\/schema\/logo\/image\/","url":"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/calligo-og.jpg","contentUrl":"https:\/\/www.calligo.io\/wp-content\/uploads\/2023\/04\/calligo-og.jpg","width":1200,"height":630,"caption":"Calligo"},"image":{"@id":"https:\/\/www.calligo.io\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/calligocloud","https:\/\/www.linkedin.com\/company\/calligo-limited\/"]},{"@type":"Person","@id":"https:\/\/www.calligo.io\/#\/schema\/person\/e2e0283a3e6c3a237a10e012c081755f","name":"Brendan Walsh","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.calligo.io\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/299d5b23f0682aabb1a2347ddf8b95df04b22cfec378aea17a8f7395c74b2bc8?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/299d5b23f0682aabb1a2347ddf8b95df04b22cfec378aea17a8f7395c74b2bc8?s=96&d=mm&r=g","caption":"Brendan Walsh"}}]}},"_links":{"self":[{"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/posts\/1779","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/users\/33"}],"replies":[{"embeddable":true,"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/comments?post=1779"}],"version-history":[{"count":0,"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/posts\/1779\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/media?parent=1779"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/categories?post=1779"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/tags?post=1779"},{"taxonomy":"post_format_type","embeddable":true,"href":"https:\/\/www.calligo.io\/wp-json\/wp\/v2\/post_format_type?post=1779"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}