Jump to content

Zoom and GDPR

sarahstacey
 Share

Recommended Posts

sarahstacey

sarahstacey

Posted
Posted

Good afternoon,

 

I hope all is well with you and yours..

 

I'm after some advice about the use of Zoom.

 

Our school is using Google Classroom to deliver lessons while we are closed and as part of that we are using Google Meet.

 

However our music department has instructed their peripatetic staff to deliver lessons via Zoom..

 

I would rather it was all kept within Classroom etc as that is within our google domain.

 

From a GDPR perspective where do we stand as the pupils are connecting directly to the peris, pupils dont have school email accounts so they must be using their own or their parents accounts to sign up to zoom.

 

Thanks for any guidance.

jmak

jmak

Posted
Posted (edited)

I joined a Zoom meeting a couple of days ago. No idea what information the host had to give, but I just used the URL which contained the meeting ID (in plain text). I did have to run an exe, but didn't give any data.

I used a Windows machine, so no issue with the app sharing with Facebook.

Edited by jmak
Arthur

Arthur

Posted
Posted (edited)
You may want to read about zoom sharing data with Facebook.

 

Zoom's Use of Facebook’s SDK in iOS Client

 

Zoom takes its users’ privacy extremely seriously. We would like to share a change that we have made regarding the use of Facebook’s SDK.

 

We originally implemented the “Login with Facebook” feature using the Facebook SDK for iOS (Software Development Kit) in order to provide our users with another convenient way to access our platform. However, we were made aware on Wednesday, 25 March 2020, that the Facebook SDK was collecting device information unnecessary for us to provide our services. The information collected by the Facebook SDK did not include information and activities related to meetings such as attendees, names, notes, etc., but rather included information about devices such as the mobile OS type and version, the device time zone, device OS, device model and carrier, screen size, processor cores, and disk space.

 

Our customers’ privacy is incredibly important to us, and therefore we decided to remove the Facebook SDK in our iOS client and have reconfigured the feature so that users will still be able to log in with Facebook via their browser. Users will need to update to the latest version of our application that’s already available at 2:30 p.m. Pacific time on Friday, 27 March 2020, in order for these changes to take hold, and we strongly encourage them to do so.

 

Example information sent by the SDK on installation and application open and close:

 

  • Application Bundle Identifier
  • Application Instance ID
  • Application Version
  • Device Carrier
  • iOS Advertiser ID
  • iOS Device CPU Cores
  • iOS Device Disk Space Available
  • iOS Device Disk Space Remaining
  • iOS Device Display Dimensions
  • iOS Device Model
  • iOS Language
  • iOS Timezone
  • iOS Version
  • IP Address

We would like to thank Joseph Cox from Motherboard for bringing this to our attention here.

 

We sincerely apologize for the concern this has caused, and remain firmly committed to the protection of our users’ privacy. We are reviewing our process and protocols for implementing these features in the future to ensure this does not happen again.

Edited by Arthur
  • Thanks 1
sparkeh

sparkeh

Posted
Posted
If you are quicker than @Arthur then you earn a gold medal!

 

Highly prized among the Edugeek community.

 

Whilst I totally agree, I was really referring to how quickly Zoom changed their practices. [emoji23]

  • Thanks 1
fredesq

fredesq

Posted
Posted

I've been told by our data protection person that was told by our dedicated 3rd party DPO that because of GDPR, students aren't allowed to use their webcams if in a video chat with their class.

 

Has anyone else heard of anything similar?

elsiegee40

elsiegee40

Posted
Posted
I've been told by our data protection person that was told by our dedicated 3rd party DPO that because of GDPR, students aren't allowed to use their webcams if in a video chat with their class.

 

Has anyone else heard of anything similar?

@GrumbleDook?

  • Thanks 1
GrumbleDook

GrumbleDook

Posted
Posted

 

I’m doing a fair bit of reviewing of Zoom at the moment to get to the bottom of a few things and their legal team where being pretty helpful until the PR nightmare meant things had to go via PR and be checked. Still chatting with them to clear things up.

 

As for GDPR and webcams?

 

Let’s look at this as how schools manage risk. Webcams give a look into the personal life of individuals unless they have a dedicate space to use them, or are taking precautions.

 

Data Protection/Privacy is risk-based and so if it is felt that this is too great an intrusion then that is fine. The school will be advised by their DPO and make a relevant decision. The school decides based on what risks it could lower and how they plan to do that. For some schools it will be fine, for others maybe not so much.

 

This is what DPIAs are for. I’ll see what can be done to help everyone on this.

  • Thanks 3
hardtailstar

hardtailstar

Posted
Posted
I've been told by our data protection person that was told by our dedicated 3rd party DPO that because of GDPR, students aren't allowed to use their webcams if in a video chat with their class.

 

Has anyone else heard of anything similar?

 

I’m doing a fair bit of reviewing of Zoom at the moment to get to the bottom of a few things and their legal team where being pretty helpful until the PR nightmare meant things had to go via PR and be checked. Still chatting with them to clear things up.

 

As for GDPR and webcams?

 

Let’s look at this as how schools manage risk. Webcams give a look into the personal life of individuals unless they have a dedicate space to use them, or are taking precautions.

 

Data Protection/Privacy is risk-based and so if it is felt that this is too great an intrusion then that is fine. The school will be advised by their DPO and make a relevant decision. The school decides based on what risks it could lower and how they plan to do that. For some schools it will be fine, for others maybe not so much.

 

This is what DPIAs are for. I’ll see what can be done to help everyone on this.

 

Our school is only video calling 6th formers for lessons. Both students and staff were told basically to have a plain wall behind them with no other personal property behind so that only the student/staff was visible in the webcam.

  • Thanks 1
garbage46

garbage46

Posted
Posted
Pupils connecting adults who are not school staff via webcam sounds well dodgy from a safeguarding perspective, espcially when you throw in potential recording of video! Has this been run past your DSL and or safeguarding lead?
GrumbleDook

GrumbleDook

Posted
Posted
Pupils connecting adults who are not school staff via webcam sounds well dodgy from a safeguarding perspective, especially when you throw in the potential recording of video! Has this been run past your DSL and or safeguarding lead?

 

Which is why Safeguarding staff should always be involved when doing DPIAs ... it is not the job of an individual but that of a team.

  • Thanks 3

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing


×
×
  • Create New...