8 Total
1 High severity
7 Medium severity
0 Low severity
Summary

This document establishes Zoom's data collection and processing practices for its video conferencing, phone, chat, and AI features. Zoom collects personal identifiers (name, email address), device and network data (device identifiers, IP address), meeting content (audio, video, transcripts, chat messages), and usage data. The statement authorizes Zoom to use collected data for AI model training unless an account administrator disables this setting.

Technical / Legal Breakdown

This document is Zoom's Privacy Statement, governing the collection, use, disclosure, and retention of personal data by Zoom Video Communications, Inc. across its suite of products and services, including Zoom Meetings, Zoom Phone, Zoom Chat, Zoom Rooms, Zoom Webinars, and AI-powered features such as AI Companion. The statement asserts that Zoom collects account and profile data, device and network identifiers, meeting content (audio, video, transcripts, and chat messages), usage and behavioral data, payment information, and data from third-party integrations and advertising partners; it also states that Zoom processes customer content to provide, support, and improve its services, and that it may use certain data to train AI and machine learning models unless account administrators disable this feature. A notable provision authorizes Zoom to collect and process meeting content including audio and video recordings and AI-generated transcripts, with consent and opt-out mechanisms allocated primarily to account administrators rather than individual meeting participants, which may limit participants' practical ability to control their own data. The statement references GDPR and EU/UK adequacy and transfer mechanisms (Standard Contractual Clauses), CCPA and California privacy rights, and applicable frameworks in Brazil (LGPD), Japan, South Korea, Australia, and other jurisdictions; compliance teams should evaluate whether administrator-level consent mechanisms satisfy individual data subject rights obligations under GDPR Article 7 and CCPA opt-out requirements, particularly where end users are participants on accounts they do not control.

Institutional Analysis

Institutional analysis available with Professional

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Start Professional free trial

1 important change detected

2 versions captured · Last updated: May 2026

What changed Zoom updated its privacy policy on May 19, 2026 to reference 'Zoom Canvas' instead of 'Zoom Docs' in the section describing collaborative feature content that account owners and administrators can access. The operational scope and access authority remain unchanged; this appears to be a product naming or feature update reflected in the policy language.
Why this matters The updated privacy statement now lists 'Zoom Canvas' instead of 'Zoom Docs' in the section describing collaborative feature content that account owners and designated administrators can access depending on their settings. The access authority, scope, and conditions remain unchanged. This change reflects a product naming update and does not alter user rights or data handling practices.
View full change record →
High — 1 provision
Medium — 7 provisions

Monitoring

Zoom has updated this document before.

Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →

Professional Governance Intelligence

Need provision-level monitoring and regulatory mapping?

Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.

Start Professional free trial

Cross-platform context

See how other platforms handle Account Owner Control Over Participant Privacy and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

BIPA
Illinois, USA
View official text ↗
CCPA/CPRA
California, USA
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
UK GDPR
United Kingdom
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured May 19, 2026 00:17 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000190
Version ID CA-V-002720
SHA-256 268b9c4ecf7f10a9b01520c8074c8a0a442aa484e09787363e24ac61f80447c6
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.

Create free account Compare plans