Transferring personal data out of Europe: updating Zoom’s DPA

The General Data Protection Regulation (GDPR) sets strict requirements for transferring personal data outside of the European Economic Area (EEA). To ensure that data is protected, companies must use appropriate safeguards such as standard contractual clauses (SCCs) when transferring data to countries that do not provide an adequate level of protection.

In light of recent developments, Zoom has updated its Data Processing Agreement (DPA) to comply with the GDPR and provide these necessary safeguards for customers transferring personal data out of the EEA. The updated DPA includes the use of SCCs to provide adequate protection for personal data transferred to countries outside the EEA.

Zoom takes the protection of personal data very seriously and is committed to ensuring the privacy and security of its customers’ data. By updating its DPA, Zoom is able to provide its customers with the necessary safeguards required by the GDPR for transferring personal data out of the EEA.

 

Updating Zoom’s Data Processing Agreement (DPA) for European Resident Data

  • The Standard Contractual Clauses (SCCs) in Zoom’s DPA have been updated and companies have until December 27, 2022 to update their DPAs accordingly.
  • The new SCCs introduce stronger data protection measures such as “know-your-transfer” obligations, requiring parties to conduct a case-by-case assessment of the legality of each data transfer.
  • Zoom incorporated the new SCCs in February 2022 for customers whose use of Zoom services is governed by Zoom’s online Terms of Service from that time. No further action is required for these customers.
  • For customers whose DPAs still contain the old SCCs:
    • Customers who have purchased online or have executed a Zoom quote with Zoom may update their DPA by executing Zoom’s updated DPA using the instructions provided.
    • Customers who have executed a Master Subscription Agreement and separate DPA with Zoom may update their agreement by contacting their sales executive. If assistance is needed, please contact Zoom Support.

 

Updates to Zoom’s Global Data Processing Agreement

In February 2022, Zoom made improvements to its standard global Data Processing Agreement (DPA) following its collaboration with the Dutch government. The updates include:

  • Enhanced Audit Rights
  • Clarification of Controller and Processor Roles and Obligations
  • Strengthened Protections Around Government Access Requests
  • Increased Operational Flexibility

These updates are in addition to the already robust data protection measures that Zoom offers, including its Transparency Report and Data Transfer Impact Assessment (DTIA). These resources provide customers with the information they need to understand Zoom’s data protection practices.

Updating Your DPA with Zoom

Customers who have purchased Zoom online or have executed a Zoom quote with the company have the option to replace their existing DPA with Zoom’s updated DPA. Simply follow this link to complete the process.

 

10 Frequently asked questions and answer about the zoom SCC update

What are the Standard Contractual Clauses (SCCs)?

Answer: SCCs are provisions drafted by the European Commission that outline the procedure for transferring European resident data across international borders.

Why were the SCCs updated?

Answer: The SCCs were updated to introduce stronger data protection measures, such as “know-your-transfer” obligations, which require parties to conduct a case-by-case assessment of the legality of each data transfer.

When were the SCCs updated?

Answer: The SCCs were updated in February 2022.

What changes were made to the SCCs?

Answer: The new SCCs include stronger data protection measures, such as “know-your-transfer” obligations and Data Transfer Impact Assessments (DTIAs).

What do I need to do if I use Zoom’s platform and have European resident data?

Answer: If you have purchased online or have executed a Zoom quote with Zoom, you may choose to execute Zoom’s updated DPA using the instructions provided. If you have executed a Master Subscription Agreement and separate Data Processing Agreement with Zoom, you may update your agreement by contacting your sales executive.

When do I need to update my DPA with the new SCCs?

Answer: Companies have until December 27, 2022 to update their DPAs with the new SCCs.

How can I update my DPA with the new SCCs?

Answer: Customers who have purchased online or have executed a Zoom quote with Zoom may choose to execute Zoom’s updated DPA using the instructions provided. Customers who have executed a Master Subscription Agreement and separate Data Processing Agreement with Zoom may update their agreement by contacting their sales executive.

Is there a cost to update my DPA with the new SCCs?

Answer: The cost to update your DPA with the new SCCs will depend on your agreement with Zoom. Contact your sales executive for more information.

What happens if I don’t update my DPA with the new SCCs by December 27, 2022?

Answer: Failure to update your DPA with the new SCCs by December 27, 2022 may result in a breach of your agreement with Zoom and possible legal consequences.

Who can I contact for more information about the SCC update?

Answer: If you need assistance updating your DPA with the new SCCs or have any other questions, please contact Zoom Support.

 

Who is authorized to sign the DPA?

Answer: The appropriate person from your organization who has the signing authority should sign the updated DPA. If unsure, it’s recommended to consult with the legal team.

Does the updated DPA cover the U.K.?

Answer: Yes, the updated DPA is compliant with the U.K.’s GDPR requirements and includes the necessary U.K. data transfer mechanisms.

How can I determine which version of the DPA I have?

Answer: If you signed up for Zoom’s services before September 2021, it’s likely that you have the old version of the DPA, and you can choose to replace it with the updated version.

What should I do if my organization negotiated a custom DPA with Zoom before the new SCCs were introduced?

Answer: Contact your sales executive who will assist you in updating your DPA. If you need further assistance, please reach out to Zoom Support.

Will my use of Zoom’s services be affected if I don’t adopt the new SCCs?

Answer: No, the version of the SCCs included in your DPA will not have a direct impact on the provision of Zoom’s services.

Am I eligible for the process of updating the DPA?

Answer: You may be eligible if you meet the following criteria:

You are required to comply with the European Union’s General Data Protection Regulation (GDPR)
You purchased Zoom’s services online or signed a Zoom quote with the company prior to February 2022.


FAQs

Who can see and share my personal data when I use Zoom?

Meeting hosts, participants, and invitees are able to view and (depending on the settings chosen by the account owner) record, save, and share meeting content, audio transcripts, messages sent to Everyone, messages sent to meeting group chats (where enabled, and regardless of whether they were sent in Team Chat or in-meeting), as well as messages sent to them.

Does Zoom collect personal data?

Zoom takes the protection of your personal information very seriously and will only collect the data from those who use the Zoom platform that is absolutely necessary to provide the service and ensure that it is provided in an efficient manner. Check out our stance on privacy here.

 

Can 2 users use the same Zoom account?

Click the “Add Users” button whenever you want to add a new user to your account. Please provide the details for the user. Email Address: Here you can enter the email address of the user.It is possible to enter several email addresses by separating them with commas. This is useful if you need to create numerous users with the same settings.

Can you transfer Zoom?

Log in to the Zoom web portal using an account that has administrative privileges and the ability to change account settings. Click on Account Management in the drop-down menu in the navigation bar, then click on Account Settings. To access the Meeting tab, click here. To enable or disable the feature, go to the In Meeting (Basic) section of the app and click the Allow users to move meetings between devices toggle.

 

How do I transfer my Zoom account to another computer?

  1. On both computers, launch the EaseUS Todo PCTrans program.
  2. Join together two different PCs.
  3. Choose the applications, programs, and software you want, then transfer it to the computer you’re using.