Transferring personal data out of Europe: updating Zoom’s DPA
Contents
- 1 Transferring personal data out of Europe: updating Zoom’s DPA
- 2 Updating Zoom’s Data Processing Agreement (DPA) for European Resident Data
- 3 Updates to Zoom’s Global Data Processing Agreement
- 4 10 Frequently asked questions and answer about the zoom SCC update
- 4.1 What are the Standard Contractual Clauses (SCCs)?
- 4.2 Why were the SCCs updated?
- 4.3 When were the SCCs updated?
- 4.4 What changes were made to the SCCs?
- 4.5 What do I need to do if I use Zoom’s platform and have European resident data?
- 4.6 When do I need to update my DPA with the new SCCs?
- 4.7 How can I update my DPA with the new SCCs?
- 4.8 Is there a cost to update my DPA with the new SCCs?
- 4.9 What happens if I don’t update my DPA with the new SCCs by December 27, 2022?
- 4.10 Who can I contact for more information about the SCC update?
- 4.11 Who is authorized to sign the DPA?
- 4.12 Does the updated DPA cover the U.K.?
- 4.13 How can I determine which version of the DPA I have?
- 4.14 What should I do if my organization negotiated a custom DPA with Zoom before the new SCCs were introduced?
- 4.15 Will my use of Zoom’s services be affected if I don’t adopt the new SCCs?
- 4.16 Am I eligible for the process of updating the DPA?
- 4.17 FAQs
- 4.18 Who can see and share my personal data when I use Zoom?
- 4.19 Does Zoom collect personal data?
- 4.20 Can 2 users use the same Zoom account?
- 4.21 Can you transfer Zoom?
- 4.22 How do I transfer my Zoom account to another computer?
Transferring personal data out of Europe: updating Zoom’s DPA
The General Data Protection Regulation (GDPR) sets strict requirements for transferring personal data outside of the European Economic Area (EEA). To ensure that data is protected, companies must use appropriate safeguards such as standard contractual clauses (SCCs) when transferring data to countries that do not provide an adequate level of protection.
In light of recent developments, Zoom has updated its Data Processing Agreement (DPA) to comply with the GDPR and provide these necessary safeguards for customers transferring personal data out of the EEA. The updated DPA includes the use of SCCs to provide adequate protection for personal data transferred to countries outside the EEA.
Zoom takes the protection of personal data very seriously and is committed to ensuring the privacy and security of its customers’ data. By updating its DPA, Zoom is able to provide its customers with the necessary safeguards required by the GDPR for transferring personal data out of the EEA.
Updating Zoom’s Data Processing Agreement (DPA) for European Resident Data
- The Standard Contractual Clauses (SCCs) in Zoom’s DPA have been updated and companies have until December 27, 2022 to update their DPAs accordingly.
- The new SCCs introduce stronger data protection measures such as “know-your-transfer” obligations, requiring parties to conduct a case-by-case assessment of the legality of each data transfer.
- Zoom incorporated the new SCCs in February 2022 for customers whose use of Zoom services is governed by Zoom’s online Terms of Service from that time. No further action is required for these customers.
- For customers whose DPAs still contain the old SCCs:
- Customers who have purchased online or have executed a Zoom quote with Zoom may update their DPA by executing Zoom’s updated DPA using the instructions provided.
- Customers who have executed a Master Subscription Agreement and separate DPA with Zoom may update their agreement by contacting their sales executive. If assistance is needed, please contact Zoom Support.
Updates to Zoom’s Global Data Processing Agreement
In February 2022, Zoom made improvements to its standard global Data Processing Agreement (DPA) following its collaboration with the Dutch government. The updates include:
- Enhanced Audit Rights
- Clarification of Controller and Processor Roles and Obligations
- Strengthened Protections Around Government Access Requests
- Increased Operational Flexibility
These updates are in addition to the already robust data protection measures that Zoom offers, including its Transparency Report and Data Transfer Impact Assessment (DTIA). These resources provide customers with the information they need to understand Zoom’s data protection practices.
Updating Your DPA with Zoom
Customers who have purchased Zoom online or have executed a Zoom quote with the company have the option to replace their existing DPA with Zoom’s updated DPA. Simply follow this link to complete the process.
10 Frequently asked questions and answer about the zoom SCC update
What are the Standard Contractual Clauses (SCCs)?
Answer: SCCs are provisions drafted by the European Commission that outline the procedure for transferring European resident data across international borders.
Why were the SCCs updated?
Answer: The SCCs were updated to introduce stronger data protection measures, such as “know-your-transfer” obligations, which require parties to conduct a case-by-case assessment of the legality of each data transfer.
When were the SCCs updated?
Answer: The SCCs were updated in February 2022.
What changes were made to the SCCs?
Answer: The new SCCs include stronger data protection measures, such as “know-your-transfer” obligations and Data Transfer Impact Assessments (DTIAs).
What do I need to do if I use Zoom’s platform and have European resident data?
Answer: If you have purchased online or have executed a Zoom quote with Zoom, you may choose to execute Zoom’s updated DPA using the instructions provided. If you have executed a Master Subscription Agreement and separate Data Processing Agreement with Zoom, you may update your agreement by contacting your sales executive.
When do I need to update my DPA with the new SCCs?
Answer: Companies have until December 27, 2022 to update their DPAs with the new SCCs.
How can I update my DPA with the new SCCs?
Answer: Customers who have purchased online or have executed a Zoom quote with Zoom may choose to execute Zoom’s updated DPA using the instructions provided. Customers who have executed a Master Subscription Agreement and separate Data Processing Agreement with Zoom may update their agreement by contacting their sales executive.
Is there a cost to update my DPA with the new SCCs?
Answer: The cost to update your DPA with the new SCCs will depend on your agreement with Zoom. Contact your sales executive for more information.
What happens if I don’t update my DPA with the new SCCs by December 27, 2022?
Answer: Failure to update your DPA with the new SCCs by December 27, 2022 may result in a breach of your agreement with Zoom and possible legal consequences.
Who can I contact for more information about the SCC update?
Answer: If you need assistance updating your DPA with the new SCCs or have any other questions, please contact Zoom Support.
Answer: The appropriate person from your organization who has the signing authority should sign the updated DPA. If unsure, it’s recommended to consult with the legal team.
Does the updated DPA cover the U.K.?
Answer: Yes, the updated DPA is compliant with the U.K.’s GDPR requirements and includes the necessary U.K. data transfer mechanisms.
How can I determine which version of the DPA I have?
Answer: If you signed up for Zoom’s services before September 2021, it’s likely that you have the old version of the DPA, and you can choose to replace it with the updated version.
What should I do if my organization negotiated a custom DPA with Zoom before the new SCCs were introduced?
Answer: Contact your sales executive who will assist you in updating your DPA. If you need further assistance, please reach out to Zoom Support.
Will my use of Zoom’s services be affected if I don’t adopt the new SCCs?
Answer: No, the version of the SCCs included in your DPA will not have a direct impact on the provision of Zoom’s services.
Am I eligible for the process of updating the DPA?
Answer: You may be eligible if you meet the following criteria:
You are required to comply with the European Union’s General Data Protection Regulation (GDPR)
You purchased Zoom’s services online or signed a Zoom quote with the company prior to February 2022.
FAQs
Does Zoom collect personal data?
Can 2 users use the same Zoom account?
Can you transfer Zoom?
How do I transfer my Zoom account to another computer?
- On both computers, launch the EaseUS Todo PCTrans program.
- Join together two different PCs.
- Choose the applications, programs, and software you want, then transfer it to the computer you’re using.
