FTC says Zoom misled its users on its security for video meetings
Federal regulators are requiring Zoom to strengthen its security in a proposed settlement of allegations that the video conferencing service misled users about its level of security for meetings.
Th e settlement, approved by the Federal Trade Commission in a 3-2 vote, was announced Monday. A complaint filed by the agency accused Zoom of deceiving users over security since at least 2016. It said the company held on to cryptographic keys that allowed it to access content from its customers’ meetings, and secured meetings with a lower level of privacy encryption than it promised customers.
Zoom has become a staple during the coronavirus pandemic because it allows people to meet online rather than in person. The company claims some 300 million users, boosted by the tens of millions of workers around the world who were suddenly ordered to work from home in the spring as the virus outbreak shut down wide swaths of the economy.
The FTC alleged that
Zoom “engaged in a series of deceptive and unfair practices that undermined the security of its users.”
The company’s misleading claims gave users a false sense of security, the regulators said, especially for those who used the videoconferencing platform to discuss sensitive topics such as health and financial information. They noted that in blog posts, Zoom promoted its level of encryption as a
reason for consumers — whether families, schools, social groups or businesses — to use the services.
The proposed settlement doesn’t include any financial penalties for the company or restitution for affected users.
Zoom Video Communications Inc., based in San Jose, California, would be required under the settlement to take specific measures, such as establishing a program
for resolving privacy vulnerability. Company personnel would be required to review any software updates for security flaws.
Zoom said it has already addressed the problems cited by the FTC. The settlement “is in keeping with our commitment to innovating and enhancing our product as we deliver a secure video communications experience,” the company said in a statement Monday.