Carnegie Mellon University

Zoom and Your Privacy

With our recent shift to fully remote teaching, learning and work, the Carnegie Mellon University campus community is heavily relying on the Zoom service to stay connected. This reliance logically raises questions regarding privacy. 

Our Enterprise Zoom Agreement

Zoom maintains reasonable physical and technical safeguards to prevent unauthorized disclosure of or access to Customer Data. Zoom will comply with applicable privacy laws and regulations with respect to personal data within Zoom’s possession and control. Customer retains ownership of any content or data (“Customer Data”) originated from Customer and stored or transmitted using the Services.

Service Administration and Dashboards

Zoom is a complex service and requires in-depth analysis and monitoring to ensure reliability of the service and to enable troubleshooting of issues. Some of this monitoring is facilitated through the use of dashboards that include overall usage information, individual meeting statistics and access to meeting artifacts, including recordings.

Rest assured, only Zoom service administrators within Computing Services have access to this monitoring information and meeting data.  Similar to other services, monitoring information is confidential and not shared for purposes other than ensuring the reliability and quality of the service, or in cases of emergency as outlined in the Computing Policy. We are also establishing practices to periodically audit access to this material and compliance with university privacy expectations.

Recording Meetings

Advance notice should be given to attendees anytime you record a Zoom session. Recordings may not be shared, distributed or posted on the internet without the express written permission of meeting participants. When recording a live class session, orally remind participants that you are recording to be used as a reference resource for those in attendance. This oral notice should be captured on the audio recording and repeated at the beginning of each recorded session.

Because course recordings are covered under the Family Educational Rights and Privacy Act (FERPA) and must not be shared with any third-party audience (those not registered or associated with the course-section), follow the strict FERPA Guidelines for Recording Class Sessions as provided by university legal counsel.