OneTrust is authorized to process name, email address, account type, country, IP address, DSAR reports, and user cookie preferences for the purpose of managing data subject access requests and cookie preference selections, with processing in the United States under SCCs.
This analysis describes what Zoom's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
DSAR reports processed by OneTrust may contain aggregated personal data about the requesting individual compiled in response to data subject access requests under GDPR or CCPA; the processing of these reports by a US-based subprocessor under SCCs is a material consideration for data controllers assessing whether their data subject rights fulfillment process involves adequate transfer safeguards.
Under this provision, personal data submitted through Zoom's data subject access request portal and cookie preference center, including name, email, IP address, and DSAR report content, is processed by OneTrust in the United States under Standard Contractual Clauses. This provision directly affects the mechanism through which individuals exercise data subject rights with Zoom.
Cross-platform context
See how other platforms handle OneTrust Data Subject Request Processing and similar clauses.
Compare across platforms →"OneTrust Data Subject Requests Portal, Cookie Preference Center Name Email address Account type Country IP address DSAR reports User cookie preferences United States SCCsExcerpt from Zoom's Sub-Processors
1) REGULATORY LANDSCAPE: This provision engages GDPR Articles 15-22 (data subject rights) and Chapter V (international transfers) given that DSAR reports containing personal data are transferred to OneTrust in the United States under SCCs.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
DSAR reports processed by OneTrust may contain aggregated personal data about the requesting individual compiled in response to data subject access requests under GDPR or CCPA; the processing of these reports by a US-based subprocessor under SCCs is a material consideration for data controllers assessing whether their data subject rights fulfillment process involves adequate transfer safeguards.
Under this provision, personal data submitted through Zoom's data subject access request portal and cookie preference center, including name, email, IP address, and DSAR report content, is processed by OneTrust in the United States under Standard Contractual Clauses. This provision directly affects the mechanism through which individuals exercise data subject rights with Zoom.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Zoom.