Zoom · Zoom Privacy Statement · View original document ↗

HIPAA and Health Data Handling

High severity High confidence Explicitdocumentlanguage Unique · 0 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity Zoom recorded 5 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for Zoom Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.

This analysis describes what Zoom's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

The clause creates a conditional framework where HIPAA-covered entities operate under a separate contractual regime for health data handling. This ensures that entities subject to HIPAA compliance obligations have explicit contractual alignment with Zoom regarding PHI safeguards and use restrictions required by the Health Insurance Portability and Accountability Act.

Consumer impact (what this means for users)

For organizations with an executed BAA with Zoom, Zoom's handling of protected health information is governed by the BAA terms rather than the standard Privacy Statement. Organizations without a BAA in place operate under the general Privacy Statement terms for any health data transmitted through the service.

How other platforms handle this

Luma AI Medium

As between the parties, Luma owns and retains all right, title, and interest, including all related intellectual property and proprietary rights, in and to the Aggregated Data and Usage Data (including any improvements, modifications, and enhancements thereto), the know-how and analytical results ge...

Cohere Medium

Enterprise customers own their data. Cohere does not claim ownership over the inputs or outputs of enterprise customers.

Cloudflare Medium

You agree not to engage in any of the following prohibited activities: (i) copying, distributing, or disclosing any part of the Service in any medium, including without limitation by any automated or non-automated 'scraping'; (ii) using any automated system, including without limitation 'robots,' 's...

See all platforms with this clause type →

Monitoring

Zoom has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
If you are covered under a HIPAA Business Associate Agreement with Zoom, the terms of that agreement will govern our handling of protected health information, to the extent applicable.

— Excerpt from Zoom's Zoom Privacy Statement

Provision details

Document information
Document
Zoom Privacy Statement
Entity
Zoom
Document last updated
May 5, 2026
Tracking information
First tracked
May 8, 2026
Last verified
May 12, 2026
Record ID
CA-P-009836
Document ID
CA-D-00190
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
7e03086e86b2662187a23d84325743e721ed9a2d9db45ecd566d8725a825d725
Analysis generated
May 8, 2026 11:13 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Zoom
Document: Zoom Privacy Statement
Record ID: CA-P-009836
Captured: 2026-05-08 11:13:55 UTC
SHA-256: 7e03086e86b26621…
URL: https://conductatlas.com/platform/zoom/zoom-privacy-statement/hipaa-and-health-data-handling/
Accessed: June 10, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Zoom's HIPAA and Health Data Handling clause do?

The clause creates a conditional framework where HIPAA-covered entities operate under a separate contractual regime for health data handling. This ensures that entities subject to HIPAA compliance obligations have explicit contractual alignment with Zoom regarding PHI safeguards and use restrictions required by the Health Insurance Portability and Accountability Act.

How does this clause affect you?

For organizations with an executed BAA with Zoom, Zoom's handling of protected health information is governed by the BAA terms rather than the standard Privacy Statement. Organizations without a BAA in place operate under the general Privacy Statement terms for any health data transmitted through the service.

Is ConductAtlas affiliated with Zoom?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Zoom.