Zoom Communications, Inc.

The U.S. Federal Trade Commission finalized a settlement with Zoom Video Communications over allegations that the company engaged in deceptive and unfair practices that undermined user security. The FTC alleged that, since at least 2016, Zoom told users that it offered end-to-end 256-bit encryption when meetings were not protected at that level in all circumstances. The FTC also alleged that Zoom installed software on Mac computers that bypassed a browser security safeguard and could automatically launch the Zoom application. Under the final order, Zoom was required to implement a comprehensive information-security program, assess risks, manage vulnerabilities, review software updates for security flaws, obtain independent security assessments every two years and stop making misleading privacy or security claims. Zoom settled the matter without the FTC imposing a monetary penalty in the order. Sources: Federal Trade Commission — settlement announcement https://www.ftc.gov/news-events/news/press-releases/2020/11/ftc-requires-zoom-enhance-its-security-practices-part-settlement Federal Trade Commission — case page and final order https://www.ftc.gov/legal-library/browse/cases-proceedings/192-3167-zoom-video-communications-inc-matter