Here are the top 5 discoveries from our review:
1) No videoconferencing applications address authorized agents. This makes sense, as the treatment of authorized agents were just laid out in the recently finalized regulations. This is a reminder to businesses to utilize these regulations when setting up compliance measures to ensure there is no risk in missing out on requirements like this, which will still be required and enforced by the Attorney General.
3) None of the platforms address information relating to minors under the age of 16, which is notable as some of these platforms have been used for online education. The final regulations outline different treatment for minors from ages 13 to 16, and for minors under the age of 13. As a result, privacy policies focused on compliance with the Children's Online Privacy Protection Act (COPPA) may be insufficient as it only applies to those under 13 years old.
4) While all of the platforms state that no sale of information occurs, two platforms (Zoom and GoToMeeting) go above and beyond to explain the right to opt-out of sales. This is especially great as the CCPA permits that no notice needs to be given if no sale occurs. By taking this extra step, Zoom and GoToMeeting explain to their users that they have additional rights, which may be necessary as these platforms are also used by other entities, which may collect or otherwise use information collected from a videoconference meeting.
5) Only one platform (Wire) does not give instructions on how to delete information. The CCPA regulations still require that information regarding instructions on how to delete information be given. The lack of instructions does not relieve Wire from its obligations, and similarly situated businesses may find themselves in a position where they will have to comply with a consumer request, in any form, as the regulations require that a business either comply, or list the proper instructions on how to make the request.
Download the Full Breakdown
We hope this serves as a reminder to everyone to read the privacy platforms for the services you use and update your company’s privacy policies to comply with the most recent regulations, as none of these services are currently in complete compliance, and it is only a matter of time before enforcement begins.