Zoom may collect and process biometric identifiers including facial geometry and voiceprint when users opt into certain enhanced features, subject to user consent. The data is subject to a deletion schedule tied to feature discontinuation or a two-year inactivity period, whichever comes first.
This analysis describes what Zoom's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision requires user opt-in consent and establishes a defined retention and deletion schedule for biometric identifiers. The collection of facial geometry and voiceprint data engages state biometric privacy laws, particularly Illinois BIPA, which imposes specific written consent, retention schedule publication, and destruction requirements that may impose obligations beyond what this provision alone establishes.
This new high-severity provision introduces biometric data collection capabilities, which requires explicit user consent and has significant privacy and security implications.
View full change record →This provision establishes that Zoom processes biometric identifiers including facial geometry and voiceprint only when users affirmatively opt in and provide required consent, with deletion occurring upon feature discontinuation or after two years of inactivity. Users who do not opt into these enhanced features will not have biometric data collected under this clause.
Cross-platform context
See how other platforms handle Biometric Data Processing (Facial Geometry and Voiceprint) and similar clauses.
Compare across platforms →"If you elect to enable certain features and you provide the requisite consent, Zoom may process data about your unique physical characteristics, including your facial geometry and/or voiceprint, for the purpose of offering the features. This data will be deleted when no longer necessary, adequate, or relevant to offering the features or when two years have passed since your last interaction with Zoom, whichever occurs first. Your account owner or administrator may need to enable these features before you can elect to enable them and/or may have the ability to disable the features on your behalf.Excerpt from Zoom's Privacy Statement
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision requires user opt-in consent and establishes a defined retention and deletion schedule for biometric identifiers. The collection of facial geometry and voiceprint data engages state biometric privacy laws, particularly Illinois BIPA, which imposes specific written consent, retention schedule publication, and destruction requirements that may impose obligations beyond what this provision alone establishes.
This provision establishes that Zoom processes biometric identifiers including facial geometry and voiceprint only when users affirmatively opt in and provide required consent, with deletion occurring upon feature discontinuation or after two years of inactivity. Users who do not opt into these enhanced features will not have biometric data collected under this clause.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Zoom.