{"id":3528,"date":"2020-11-18T11:40:59","date_gmt":"2020-11-18T17:40:59","guid":{"rendered":"http:\/\/blogs.luc.edu\/compliance\/?p=3528"},"modified":"2020-11-18T11:40:59","modified_gmt":"2020-11-18T17:40:59","slug":"is-zoom-doomed","status":"publish","type":"post","link":"https:\/\/blogs.luc.edu\/compliance\/?p=3528","title":{"rendered":"Is Zoom Doomed?"},"content":{"rendered":"

Chandler Wright<\/em><\/span><\/p>\n

Associate Editor<\/em><\/span><\/p>\n

Loyola University Chicago School of Law, JD 2022<\/em><\/span><\/p>\n

There is no doubt that working from home has become a new normal for millions of employees worldwide, and for some, this may be the future<\/a> of their employment. When the workforce made the shift to remote work and online meeting navigation, Zoom Video Communications, Inc. (\u201cZoom\u201d) quickly became the frontrunning platform. Many companies flocked to Zoom because of its alleged higher levels of security and encryption capabilities. However, a recent lawsuit<\/a> against Zoom, by nonprofit group Consumer Watchdog<\/a>, reveals that Zoom may not actually be as safe for users as it once claimed to be. Other lawsuits<\/a> allege privacy concerns including Zoom sending user data to Facebook. Most recently, the FTC filed a suit<\/a> against Zoom on November 9th for allegations of unfair, deceptive, or abusive acts or practices (\u201cUDAAP\u201d) related to encryption, cloud storage, third-party safeguards, and failure to disclose information to users. Though various privacy concerns arise, the platform\u2019s popularity continues to increase given its newfound necessity.<\/span><\/p>\n

<\/span><\/p>\n

Zoom\u2019s laundry list of lawsuits<\/strong><\/span><\/p>\n

Zoom\u2019s 2019 annual revenue was $623 million.<\/a> This year, its revenue already exceeds $664 million<\/a>. By April 2020, Zoom had 300 million<\/a> daily meeting participants worldwide. Zoom quickly found out however, that widespread popularity comes with a hefty price \u2014 litigation. Lawsuits against Zoom commenced in March of this year, and to-date, there have been over 80 lawsuits<\/a> filed. A class action suit<\/a> filed on March 30 alleged that Zoom was sending user data to Facebook. In April, Zoom was sued 17 times, including an SEC class action suit<\/a>, alleging that Zoom made false and misleading statements that artificially inflated Zoom\u2019s stock prices. Multiple attorneys general, including Connecticut, New York, and Florida have sent letters to Zoom or filed suits regarding \u201czoom-bombing\u201d incidents<\/a>. On April 3, 2020 Sherrod Brown, Ohio Senator and ranking member of the Banking, Housing and Urban Affairs Committee, sent a letter<\/a> to the FTC urging an investigation into Zoom\u2019s troublesome practices.<\/span><\/p>\n

What are UDAAP and why is regulation important?<\/strong><\/span><\/p>\n

Senator Brown\u2019s letter<\/a> references the FTC\u2019s 1983 Policy Statement<\/a> which defines the elements of deception. First, there must be a \u201crepresentation, omission, or practice that is likely to mislead the consumer.\u201d Second, \u201cthe act or practice must be considered from the perspective of the reasonable consumer.\u201d Third, \u201cthe representation, omission or practice must be material.\u201d The FTC complaint<\/a> that followed Senator Brown\u2019s letter, alleges multiple violations of Section 5(a) of the FTC Act<\/a>, because Zoom\u2019s deceptive acts and omissions affect commerce, as defined in Section 4 of the FTC Act. Regulation of UDAAP is important<\/a> because deceptive practices can cause significant financial injury to consumers, erode consumer confidence, and undermine the financial marketplace as whole. The government thus makes it unlawful for corporations such as Zoom, who offer consumer services, to engage in UDAAP. To assess whether an act or omission is deceptive, the FTC uses the \u201cfour Ps\u201d test<\/a>. The \u201cfour Ps\u201d are prominence, presentation, placement, and proximity. This 4-step test asks: (1) Is the statement prominent<\/em> enough for a consumer to notice? (2) Is the information presented<\/em> in an understandable way? (3) Is the placement<\/em> of the information obvious or conspicuous to consumers? and lastly (4) Is the information in close proximity<\/em> to the claim it qualifies?<\/span><\/p>\n

In the Matter of Zoom Video Communications, Inc. <\/em><\/strong>(filed 11\/9\/20)<\/strong><\/span><\/p>\n

The FTC\u2019s most recent complaint<\/a> alleges that Zoom made material misrepresentations about their ability to provide a safe and secure video conferencing platform to users. The complaint alleges five violations of the FTC Act. All counts allege that Zoom, through either acts or omission \u201crepresented, directly or indirectly, expressly or by implication,\u201d deceptive information. Count I contends deceptive representation regarding \u201cend-to-end encryption.\u201d This count references Zoom\u2019s statement that it employed end-to-end encryption to provide a safer platform when , in fact, it did not employ this method. Count II claims deceptive representation regarding the level of encryption used. This count references\u00a0 Zoom\u2019s statement that it employed 256-bit encryption when, in fact, it did not employ this level of encryption. Count III alleges deceptive representation regarding secured cloud storage for recorded meetings. This count references Zoom\u2019s statement that recorded meetings were stored in an encrypted format in the cloud when in fact they were not. Count IV is unfair circumvention of third-party privacy and security safeguards, in reference to Zoom\u2019s inability to adequately prevent \u201czoom bombing.\u201d Lastly, Count V posits deceptive failure to disclose information. This count connects with Zoom\u2019s failure to disclose in a Mac App update that the update would allow web servers to remain on user\u2019s computers even after the Zoom App is uninstalled.<\/span><\/p>\n

Zoom employees, shareholders, and users worldwide will be anxiously awaiting the ruling in this case. Until then, Zoom users should be mindful of the information shared via the platform and always use precautions when handling confidential information in an online setting.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

There is no doubt that working from home has become a new normal for millions of employees worldwide, and for some, this may be the future of their employment. When the workforce made the shift to remote work and online meeting navigation, Zoom Video Communications, Inc. (\u201cZoom\u201d) quickly became the frontrunning platform. Many companies flocked to Zoom because of its alleged higher levels of security and encryption capabilities. However, a recent lawsuit against Zoom, by nonprofit group Consumer Watchdog, reveals that Zoom may not actually be as safe for users as it once claimed to be. Other lawsuits allege privacy concerns including Zoom sending user data to Facebook. Most recently, the FTC filed a suit against Zoom on November 9th for allegations of unfair, deceptive, or abusive acts or practices (\u201cUDAAP\u201d) related to encryption, cloud storage, third-party safeguards, and failure to disclose information to users. Though various privacy concerns arise, the platform\u2019s popularity continues to increase given its newfound necessity.<\/p>\n","protected":false},"author":78,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[534,914,1205,1623,1788,2032],"class_list":["post-3528","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-covid-19","tag-ftc","tag-journal-of-regulatory-compliance","tag-cybersecurity","tag-sec","tag-udaap"],"_links":{"self":[{"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=\/wp\/v2\/posts\/3528","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=\/wp\/v2\/users\/78"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3528"}],"version-history":[{"count":0,"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=\/wp\/v2\/posts\/3528\/revisions"}],"wp:attachment":[{"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3528"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3528"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3528"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}