Zoom - Sicherheit und Datenschutz/en
Jnk (Diskussion | Beiträge) |
Jnk (Diskussion | Beiträge) |
||
| Zeile 59: | Zeile 59: | ||
== Adjustments made by the IMT== | == Adjustments made by the IMT== | ||
| − | To ensure that your personal data is protected in the best possible way, we have configured Zoom in all functional areas so that only a | + | To ensure that your personal data is protected in the best possible way, we have configured Zoom in all functional areas so that only a minmal data is transmitted and stored. |
| − | === | + | === Participation in meetings === |
| − | * | + | * All meetings start with participant video turned off. Participants must turn their video actively on. (planned for 01. 04. 2021) |
| − | * | + | * Participants are muted when entering the meeting (planned for 01. 04. 2021) |
| − | * | + | * Display of e-mail addresses via watermark is prevented. |
| − | * | + | * The use of audio watermarks is also prevented. |
| − | * | + | * A password will be set by default for all meetings, (planned for 01. 04. 2021) also for participation by phone. |
| − | * Feedbacks | + | * Feedbacks to Zoom at the end of a conference are disabled (since 21. 02. 2021). |
| − | * | + | * Remote control via screen sharing is always enabled, sharing must be confirmed. |
| − | * | + | * Remote support is disabled but can be overridden by any host. * Camera remote control is disabled but can be overridden by the host. |
| − | * | + | * Notification to the host in case of access of participants before the host are deactivated (since 21. 02. 2021). |
| − | * | + | * Automatic notification of participants in the event of cancellation of a conference is disabled (since 21. 02. 2021). |
| − | * | ||
| − | === | + | === Technical settings === |
| − | * | + | * Used data centers are restricted to USA and Europe |
| − | * | + | * Encryption of all data exchange between the Zoom cloud and the Zoom client and in the browser (transport encryption). |
| − | * | + | * If there are only two people in a meeting, a peer-to-peer connection is established. |
| − | * | + | * Deletion of personal data from Zoom's dashboard and reports after the shortest period of time (30 days) (since 21/02/2021). |
| − | * | + | * Login to Zoom portal / conferences with Google Facebook or Apple ID is prohibited (planned for 01. 04. 2021) |
| − | * | + | * Encryption of chats (planned for 01. 04. 2021) |
| − | * | + | * End-to-end encryption activated as default, but changeable (planned for 01. 04. 2021) |
| − | |||
| − | |||
| − | |||
| − | === | + | === Data exchange with other services === |
| − | * | + | * Data exchange with Office 365 is disabled. ( since 02/21) |
| − | + | * CDN usage is disabled. ( since 02/21) | |
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | * | ||
| − | |||
| + | === Storage of conference content === | ||
| + | * Storage of chat communication is not possible for participants (since 21. 02. 2021) | ||
| + | * Automatic storage of the chat communication for the host is not possible, it must be done actively. | ||
| + | * Automatic storage of whiteboard content is not possible. | ||
| + | * Storage of conferences in the Zoom Cloud is only allowed in data centers in Germany (since 21. 02. 2021). | ||
| + | * Storage of chats in the Zoom Cloud is only possible for default duration (7 days) (since 21. 02. 2021). | ||
| + | * Local recording of meetings and recordings in the cloud are possible. | ||
| + | * Automatic recording at the start of the conference is generally disabled. | ||
| + | * Participants must give their consent to the recording of a conference. | ||
| + | * Audio notifications will be made when the conference recording is started or restarted (also listenable on the phone) (since 21. 02. 2021) | ||
== Weitere Informationen == | == Weitere Informationen == | ||
* [[Zoom]] - Overview of all Zoom articles | * [[Zoom]] - Overview of all Zoom articles | ||
Version vom 19. März 2021, 11:46 Uhr
Die deutsche Version finden Sie auf der Seite Zoom - Sicherheit und Datenschutz
The Zoom video conferencing solution provides different options from the developer (Zoom) and operator (C4V) to increase data protection and security in conferences. The IMT sets some of the options centrally for all conferences, which can then no longer be changed. For other options, the IMT has recommendations, but you can still customize them yourself.
We recommend the following settings regarding
Datenschutz und Vertraulichkeit von Sitzungen[Bearbeiten | Quelltext bearbeiten]
- Use Zoom only, if no other more privacy friendly service is available. (e. g. BigBlueButton, Jitsi)
- If possibly, only use Zoom in the browser (currently not globally enabled because the client offers more features). The client needs to be downloaded and installed locally. It is more convenient and offers more functionality than the browser. However, it needs to be installed and thus has access to your computer and data.
- Enable end-to-end encryption (currently disabled, can be enabled per host as default setting or per conference) for conferences with confidential or sensitive content e. g. in committee meetings. Here is a guide and notes on the limitations of end-to-end encryption. Link
- Store recordings (if permitted) only locally if possible. You can make them online available by using e.g. Sciebo. Don't use cloud recording!
- Save chat: The chat allows participants to make comments or discuss together during the conference. They can also send you a message or exchange messages with each other, visible to everyone, or privately. As host, you can save chats, but this is not allowed for attendees.
- Virtual Background To protect your privacy, you can activate the virtual background in the settings or directly in the meeting in the video settings. This way, your surroundings are not visible to the other participants. Zoom offers a few backgrounds. You can upload also your own backgrounds. At [1] you will find backgrounds with university motifs.
Prevent disturbances[Bearbeiten | Quelltext bearbeiten]
- Vergeben Sie ein Kennwort für Ihre Konferenz (aktuell als Voreinstellung aktiviert, anpassbar geplant ab 01.04.2021 verpflichtend, Ausnahme Personal Meetings). Versehen Sie Ihr Meeting mit einem Passwort und niemand kann ohne Passwort-Kenntnis Ihrer Konferenz beitreten. Das Passwort wird mit der Einladung verschickt. Nutzen Sie zusätzlich die Option Einbetten des Kennworts in den Meeting-Link (voreingestellt): Das Meeting-Passwort wird verschlüsselt und in den Link zur Teilnahme an Konferenzen eingefügt, so dass die Teilnehmenden mit nur einem Klick teilnehmen können, ohne das Passwort eingeben zu müssen.
Hinweis zu Kennworten: Wählen Sie für jedes Meeting ein neues Passwort um den Zugang von Dritten zu verhindern. Zoom schlägt Ihnen beim Erstellen eines Meetings immer ein neues, zufälliges Passwort vor, welches Sie verwenden können. Verteilen Sie Link und Passwort Ihres Meetings nicht öffentlich, sondern nur per (dienstlicher) Mail oder eine andere gesicherte Kommunikation (bspw. über PANDA).
- Aktivieren Sie einen Warteraum (aktuell voreingestellt, änderbar). Mit einem Warteraum haben Sie die Kontrolle, wer Ihrer Konferenz beitritt. Sie müssen die Person einlassen. Ein Warteraum ist unpraktisch bei großen Veranstaltungen.
- Unabhängig von einem Warteraum überprüfen Sie in Ihrer Konferenz regelmäßig die Teilnehmer-Liste. Unbefugte Teilnehmer*innen können damit wieder entfernt werden. Außerdem können Sie über das Teilnehmer-Fenster auch alle Teilnehmer*innen stummschalten, wenn es Störungen gibt.
- Zugriff nur für Nutzer*innen mit Campuslizenz der Universität Paderborn (aktuell deaktiviert, änderbar). Mit dieser Funktion können nur Nutzer*innen der Uni Paderborn eintreten. Dies kann bei großen Lehrveranstaltungen hilfreich sein, setzt aber voraus, dass alle Teilnehmer*innen mit ihren Uni-Email-Adressen am Zoom-Portal registriert sind.
- Bildschirmfreigabe durch Teilnehmer*innen (aktuell erlaubt, änderbar). Wenn Sie diese Option deaktivieren, können Sie verhindern, dass andere Teilnehmer*innen einfach Ihren Inhalt teilen. Die Defaulteinstellung erlaubt Ihnen als Host eine Freigabe grundsätzlich zu unterbrechen.
- Annotieren/Kommentieren von Bildschirmfreigaben (Standard: nach Freigabe zunächst aktiviert, also möglich)
- Meeting sperren: Mit dem Sperren eines Meetings können Sie während eines Meetings verhindern, dass weitere Personen das Meeting betreten. Dies ist insbesondere dann nützlich, wenn es nur eine begrenzte Anzahl von Teilnehmer*innen gibt und alle bereits verbunden sind.
Auf die meisten dieser Funktionen haben Hosts über den Button "Sicherheit" mindestens vor, aber teilweise auch während eines Meetings Zugriff.
Adjustments made by the IMT[Bearbeiten | Quelltext bearbeiten]
To ensure that your personal data is protected in the best possible way, we have configured Zoom in all functional areas so that only a minmal data is transmitted and stored.
Participation in meetings[Bearbeiten | Quelltext bearbeiten]
- All meetings start with participant video turned off. Participants must turn their video actively on. (planned for 01. 04. 2021)
- Participants are muted when entering the meeting (planned for 01. 04. 2021)
- Display of e-mail addresses via watermark is prevented.
- The use of audio watermarks is also prevented.
- A password will be set by default for all meetings, (planned for 01. 04. 2021) also for participation by phone.
- Feedbacks to Zoom at the end of a conference are disabled (since 21. 02. 2021).
- Remote control via screen sharing is always enabled, sharing must be confirmed.
- Remote support is disabled but can be overridden by any host. * Camera remote control is disabled but can be overridden by the host.
- Notification to the host in case of access of participants before the host are deactivated (since 21. 02. 2021).
- Automatic notification of participants in the event of cancellation of a conference is disabled (since 21. 02. 2021).
Technical settings[Bearbeiten | Quelltext bearbeiten]
- Used data centers are restricted to USA and Europe
- Encryption of all data exchange between the Zoom cloud and the Zoom client and in the browser (transport encryption).
- If there are only two people in a meeting, a peer-to-peer connection is established.
- Deletion of personal data from Zoom's dashboard and reports after the shortest period of time (30 days) (since 21/02/2021).
- Login to Zoom portal / conferences with Google Facebook or Apple ID is prohibited (planned for 01. 04. 2021)
- Encryption of chats (planned for 01. 04. 2021)
- End-to-end encryption activated as default, but changeable (planned for 01. 04. 2021)
Data exchange with other services[Bearbeiten | Quelltext bearbeiten]
- Data exchange with Office 365 is disabled. ( since 02/21)
- CDN usage is disabled. ( since 02/21)
Storage of conference content[Bearbeiten | Quelltext bearbeiten]
- Storage of chat communication is not possible for participants (since 21. 02. 2021)
- Automatic storage of the chat communication for the host is not possible, it must be done actively.
- Automatic storage of whiteboard content is not possible.
- Storage of conferences in the Zoom Cloud is only allowed in data centers in Germany (since 21. 02. 2021).
- Storage of chats in the Zoom Cloud is only possible for default duration (7 days) (since 21. 02. 2021).
- Local recording of meetings and recordings in the cloud are possible.
- Automatic recording at the start of the conference is generally disabled.
- Participants must give their consent to the recording of a conference.
- Audio notifications will be made when the conference recording is started or restarted (also listenable on the phone) (since 21. 02. 2021)
Weitere Informationen[Bearbeiten | Quelltext bearbeiten]
- Zoom - Overview of all Zoom articles
