The statement discloses that users in certain jurisdictions, including the EU, UK, and California, have rights including access, correction, deletion, data portability, objection to processing, restriction of processing, and withdrawal of consent. The availability of each right depends on applicable law and the legal basis for processing.
This analysis describes what Zoom's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the range of data subject rights Zoom recognizes under applicable law and the mechanism by which users can exercise them. For enterprise customers, understanding which rights apply to employee or customer data processed through Zoom is relevant to their own data subject access request workflows.
The removal of this explicit rights disclosure reduces transparency about user rights under GDPR and similar regional privacy laws, though these rights remain legally applicable.
View full change record →This addition broadens privacy rights language to cover GDPR and regional laws more comprehensively, replacing the California-specific CCPA/CPRA provision with global applicability.
View full change record →The agreement establishes that users in jurisdictions covered by GDPR, UK GDPR, or CCPA can request access to, deletion of, or portability of their personal data by contacting Zoom through the designated privacy rights mechanism. The applicable rights vary by jurisdiction and the legal basis under which data is processed.
How other platforms handle this
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
Where ZipRecruiter processes your Personal Data in the capacity of a service provider (data processor), and you seek access, or want to correct, amend, or delete your Personal Data...we will provide you with the data controller's contact information, so you can contact them directly.
to request that your data be transferred to a third party (data portability)
"Depending on applicable law, you may have the right to access personal data we hold about you, correct inaccurate personal data, delete your personal data, object to or restrict our processing of your personal data, receive your personal data in a portable format, and withdraw consent where our processing is based on your consent.Excerpt from Zoom's Privacy Statement
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes the range of data subject rights Zoom recognizes under applicable law and the mechanism by which users can exercise them. For enterprise customers, understanding which rights apply to employee or customer data processed through Zoom is relevant to their own data subject access request workflows.
The agreement establishes that users in jurisdictions covered by GDPR, UK GDPR, or CCPA can request access to, deletion of, or portability of their personal data by contacting Zoom through the designated privacy rights mechanism. The applicable rights vary by jurisdiction and the legal basis under which data is processed.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Zoom.