---
type: concept
title: Zoom Data Protection (Zoom Datenschutz)
tags: [privacy, gdpr, data-sovereignty]
related: [gdpr-compliance, web-conferencing, zoom]
created: 2026-07-01
updated: 2026-07-01
sources: ["output/rz_uni_greifswald_de_dienste_webdienste_webkonferenz_datenschutz.md"]
---

# Zoom Data Protection (Zoom Datenschutz)

**Zoom Data Protection** refers to the specific legal and technical framework implemented by the **Universität Greifswald** to allow the use of the US-based Zoom service while remaining compliant with the **GDPR**.

## Core Strategies
The university manages the tension between using a "third-country" provider and EU data laws through three primary pillars:

### 1. Legal Framework
- **Custom Data Processing Agreement:** A contract ensuring that Zoom processes data only according to the university's instructions and GDPR standards.
- **Legal Bases:** Processing is justified under "public interest" (Art. 6(1)(e) GDPR) for university tasks and "employment context" (Art. 6(1)(b) GDPR) for staff.

### 2. Technical Configuration
- **Regional Routing:** Forcing traffic to stay within **European data centers**.
- **Feature Stripping:** Disabling invasive features such as **Attention Tracking**.
- **Minimization:** Configuring the platform to reduce the volume of stored and transmitted personal data.

### 3. User Agency
- **Consent-Based Recording:** Recordings are only permitted with explicit, informed consent.
- **Voluntary Adoption:** Ensuring no academic or professional penalty for users who choose not to use Zoom.
- **Control:** Settings are optimized to give users maximum control over what data they disclose during a session.
