Zoom Communications, Inc. operates a video conferencing and collaboration platform whose privacy statement describes collecting account, profile, contact, device, and registration information, the content and context of meetings and messages, usage information, and content drawn from third-party email, calendar, and file integrations. Zoom states it does not sell personal data in the conventional sense but that its use of advertising and analytics services may constitute a sale or sharing of data for targeted advertising under certain state privacy laws. In November 2020 the Federal Trade Commission settled charges that Zoom had misrepresented offering end-to-end, 256-bit encryption when it provided a lower level of security, imposing a twenty-year order without a monetary penalty; in 2021 Zoom agreed to an USD 85,000,000 class action settlement resolving claims about data sharing with third parties and unauthorised meeting access.
TRACK RECORD
1 ENFORCEMENT ACTION
[2020-11-09]
On 9 November 2020 the U.S. Federal Trade Commission announced a settlement with Zoom over allegations that, since at least 2016, the company had told users it offered end-to-end, 256-bit encryption to secure their communications when in fact it provided a lower level of security and retained cryptographic keys capable of allowing access to the content of customers' meetings. The order requires Zoom to establish a comprehensive security programme and prohibits privacy and security misrepresentations; it carried no monetary penalty and remains binding for twenty years.
Zoom's California privacy rights statement, last updated 2023-08-11, lists the categories of personal information it handles under California law as identifiers, financial account information, commercial information, internet or other electronic network activity information, audio, electronic and visual information, education information, inferences derived from that information, and sensitive personal information.
Zoom's privacy statement, last updated 2026-07-27, states that the categories of personal data it collects include account information, profile and participant information, contact information, settings, registration information and device information; content and context from meetings, webinars, messaging and other collaborative features; usage information; limited information from Zoom email and calendar services; content from third-party integrations; communications with Zoom; and information from partners.
Zoom Communications, Inc. files annual reports with the U.S. Securities and Exchange Commission under CIK 1585521; its most recent Form 10-K appears on the SEC's EDGAR filing index under that filer name, following the company's rename from Zoom Video Communications, Inc.
Zoom's California privacy rights statement states that Zoom does not sell personal data in the conventional sense, while adding that like many companies it may use advertising and analytics services intended to analyse interactions with its website or app, and that Zoom does not have actual knowledge that it sells or shares the personal information of consumers under 16 years of age.
Zoom's privacy statement states that its use of advertising and analytics services may constitute a sale or sharing of data for targeted advertising purposes under certain state privacy laws, and that Zoom provides personal data to third parties including resellers, vendors, marketing and advertising partners, corporate affiliates, and third-party developers.
On 9 November 2020 the U.S. Federal Trade Commission announced a settlement with Zoom over allegations that, since at least 2016, the company had told users it offered end-to-end, 256-bit encryption to secure their communications when in fact it provided a lower level of security and retained cryptographic keys capable of allowing access to the content of customers' meetings. The order requires Zoom to establish a comprehensive security programme and prohibits privacy and security misrepresentations; it carried no monetary penalty and remains binding for twenty years.
As reported by the ABA Journal on 2021-08-02, Zoom agreed to an USD 85,000,000 settlement in the U.S. District Court for the Northern District of California resolving class action claims concerning the sharing of user data with third parties including Facebook and unauthorised access to meetings by outside parties.
Zoom's California privacy rights statement states that the advertising and analytics services it uses operate on information obtained from cookies or other trackers, including for the purpose of delivering advertising to the user.
Zoom's privacy statement states that Zoom may permit advertising and analytics services intended to deliver advertising to the user and analyse the user's interactions, based on interactions with Zoom's website or app.