Data Sharing with Advertising and Analytics Partners

What it is

Zoom states it may share your device identifiers, behavioral data, and other information with third-party advertising and analytics companies to serve you targeted ads and measure how well those ads perform.

Why it matters (compliance & governance perspective)

This provision authorizes the disclosure of behavioral and identifier data to third-party advertising networks, which may include data brokers or ad exchanges that further share this data. This is separate from Zoom's use of your data for its own service delivery.

Consumer impact (what this means for users)

Your browsing and usage behavior on Zoom's websites and apps, along with device identifiers, may be shared with advertising and analytics partners for targeted advertising purposes. California residents can opt out of this sharing through Zoom's 'Do Not Sell or Share My Personal Information' mechanism.

What you can do

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: This provision engages CCPA and CPRA 'sharing' definitions, which cover disclosure of personal information to third parties for cross-context behavioral advertising even where no money changes hands. GDPR Articles 6 and 7 apply to the lawful basis for this processing for EU/UK users. The FTC Act applies to representations about data sharing practices. GOVERNANCE EXPOSURE: Medium. The sharing of behavioral and identifier data with advertising partners is a common industry practice, but it triggers CCPA opt-out obligations and GDPR consent or legitimate interests requirements. Organizations that deploy Zoom's web properties to their users should assess whether this advertising data sharing is disclosed in their own privacy notices. JURISDICTION FLAGS: California residents have explicit opt-out rights under CPRA for sharing of personal information with third parties for cross-context behavioral advertising. EU/UK users may have stronger protections under GDPR depending on the lawful basis Zoom relies on for this processing. CONTRACT AND VENDOR IMPLICATIONS: B2B customers whose employees use Zoom should verify whether the data processing agreement with Zoom addresses advertising data sharing and whether this is consistent with their own user-facing privacy commitments. COMPLIANCE CONSIDERATIONS: Organizations should confirm that their privacy notices accurately reflect downstream data sharing with advertising partners facilitated through Zoom's properties. California-regulated entities should verify that Zoom's opt-out mechanism is accessible to their users.

Applicable agencies

Applicable regulations

Provision details

Other risks in this policy

• AI and Machine Learning Model Training Using Customer Content high
• Collection and Processing of Meeting Content medium
• International Data Transfers and Standard Contractual Clauses medium
• CCPA and California Privacy Rights medium
• Data Retention Practices medium
• Children and Minors medium

Related Analysis

• Meta Removed 438 Sentences From Its Privacy Policy. Here Is What Disappeared.

  ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.

• 23andMe Is Bankrupt. What Happens to Your DNA Now?

  Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.