Protecting Your Sensitive Information While Using Virtual Meeting Platforms

Williams Mullen
Contact

Williams Mullen

Over the last several weeks, virtual meetings have become the new normal for many businesses. Improvements in the technology now mean that virtual meetings have a similar look and feel as in-person meetings. However, there is a much greater risk to valuable information (personal and confidential) in a virtual meeting environment. Some of these risks are associated with the data that are collected and disclosed by the provider of the virtual meeting platform itself. Others arise from inadvertent disclosures or access to virtual meeting rooms by uninvited third parties. Therefore, it is important for organizations to have policies in place that address the need for enhanced cybersecurity and data protection.

Since Zoom seems to be one of the most popular virtual meeting tools, this alert will discuss how to address these risks on its platform. However, many of these same risks are also associated with other virtual meeting platforms. As a result, it is important to review user instructions, Terms and Conditions and Privacy Policies in order to identify and implement similar protective measures for other virtual meeting services.

Potential Risk

Measures to Mitigate Risk

  1. Uninvited third-party joining meeting and seeing confidential information.
  • Use feature that automatically generates a meeting ID number rather than personal ID.
  • Require users to access meeting with password.
  • Close meeting after all invited participants have joined.
  1. Participants showing confidential or inappropriate content.

Change settings so only meeting host is allowed to share screens.

  1. Video/audio recording of content without consent.

Provide participants notice of intent to record and obtain consent.

  1. Disruptive or unruly participants.

Give host the right to mute participants.

  1. Virtual meeting access to your content.

Only use platforms with terms and conditions that limit use of user’s content.

It is also important to note that the risk profile associated with virtual meeting platforms is changing rapidly, as criminals and nation states are continually looking for new ways to exploit both technology and human weaknesses. As a result, it is important for organizations to keep current on these risks and mitigation measures. In addition, regulatory and contractual notification (as discussed here) and reporting obligations for data breaches apply to virtual meetings, so policies and procedures should be put in place to address such contingencies.

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Williams Mullen | Attorney Advertising

Written by:

Williams Mullen
Contact
more
less

Williams Mullen on:

Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
- hide
- hide