Protecting Privacy & Data During Remote Working & Using Zoom

Zoom is the primary approved software tool for remote live and recorded academic sessions and meetings for UC San Diego. This document provides basic guidance on how to protect privacy and data while addressing accessibility using Zoom during remote working and teaching.

The University protects the privacy of faculty, students, and staff while working or participating in educational programs. Use of remote delivery software and technologies heightens the criticality of privacy and the need to use the most cautious means of engaging in these alternative methods of conducting our activities. All existing law and policy that address privacy remain in effect.

    1. Video or audio recording of a lecture is permitted, but only with advance notice and opportunity to opt out of video/audio participation. This requires that you download and install the native Zoom app on your computer.
      1. Where recording is permitted, it is permitted only by the host (typically instructor or meeting chair). Students in a class and/or meeting participants and any student-hosted meetings are prohibited from recording of any kind. Accommodations for students with special needs will occur through instructor recording.
    2. Video or audio recording (including taping, recording, photographing, screen capture and other methods of capture) for purposes other than instruction is prohibited absent a strong rationale and only if the host provides advance notice and opportunity to opt out of video/audio participation.
    3. During video conferencing, there is a chat function that permits participants to ask questions and engage in dialogue with the class or meeting proceeding. Recording, including photographing, screen capture, or other copying methods of chat exchanges is prohibited except by the instructor or meeting chair when advance notice is provided.
    4. Online advising can occur via chat, audio, or video conferencing using Zoom or other approved software tools, or by phone. Sessions should not be recorded; rather, the advisor should log notes in the customary fashion.
    1. Participants can use Zoom's virtual background feature, when available, if they do not want to have their surroundings visible.
      1. To use a Virtual Background click the up arrow by the Zoom video icon and click on Choose Virtual Background.
      2. Select only appropriate virtual backgrounds.
      3. Be mindful of others in your remote location who may not wish to be visible or recorded in the background.
      4. Ensure sensitive conversations cannot be overheard or work observed by unauthorized persons in the alternate work location.
    2. Consider whether only the host needs to be visible in order to minimize bandwidth usage, and instruct participants not to enable their video, if not needed. A single video stream can ease Internet bandwidth for all participants. If video of all participants is preferred, all participants should conduct themselves in the same manner as they would in an in-person setting.
      1. Participants should be properly attired, should not gesture inappropriately, should not move from room to room, or participate in other distracting activities while still engaged in the video session.
    3. Before screen sharing, close all applications, emails, and documents that you will not use in that session. The host can also allow screen sharing by participants. Options are available by clicking on the up arrow next to the Share Screen icon. If the host determines that screen sharing by participants is needed, the host should remind participants not to share other sensitive information during the meeting inadvertently.
    4. Protect your classes and meetings delivered remotely from having unauthorized individuals join. ("Zoom bombing" is the practice of uninvited individuals entering a video call.)
      1. Videoconferencing hosts should monitor participants on teleconference calls to reduce the chance of unauthorized persons on the calls.
      2. Use a unique meeting ID for each meeting or require authentication and a passcode for participants (Settings → Profile → Personal Meeting ID; Meetings → Authenticate, Password).
      3. Limit reuse of access codes: if you've used the same code for many meetings, others will have access to your meetings using that same passcode.
    5. For further privacy features and options, see  How to Keep Uninvited Guests Out of Your Zoom Event.

    1. Give notice before recording begins and preferably with the meeting invitation or in the syllabus. Approved notification language, which provides options for opting out of being recorded:

      This [class/meeting] is being conducted over Zoom. As the host, I will be recording this session. The recording feature for others is disabled so that no one else will be able to record this session through Zoom. No recording by other means is permitted. This session will be posted on the class website in Canvas, unless otherwise notified. If you have privacy concerns and do not wish to appear in the recording, do not turn on your video. If you also prefer to use a pseudonym instead of your name, please let me know what name you will be using so that I know who you are during the session. If you would like to ask a question, you may do so privately through the Zoom chat by addressing your chat question to me only (and not to "everyone"), or you may contact me via email. If you have questions or concerns about this, please contact me.

    2. Zoom will automatically inform all participants that the session is being recorded. Be aware not all participants may be running the latest version of Zoom that implements this feature.
    3. Recordings should be retained no longer than necessary and should only be retained on approved University devices, platforms, or networks.
    4. Make clear on any class website that all recording is prohibited other than by the instructor.

    1. See How to Record Your Lecture in Zoom and Post it on the Education Continuity page for step-by-step instructions.
    1. Online advising can occur via chat, audio, or video conferencing and should be done using Zoom or other service approved by the campus, or by phone. Sessions should not be recorded; rather, the advisor should log notes in the customary fashion.  
    2. Follow the guidance in Section B above.
    1. Zoom's Privacy Policy and their Privacy Shield certification reflect that Zoom does not access data files not specifically authorized by the user (e.g. if you give Zoom access to your calendar then it will be able to read your calendar events only). Zoom does collect user data and utilizes cookies to store information on preferences. In the event you record a Zoom session, a file folder is created so that the recording can be made available for class use. If you give Zoom access to any files or programs, then you need to manage cookies through your browser settings in the way you do with other applications.
    2. Remember that UC San Diego policy and UC Security Standards apply to any computer you use for your Zoom session.