Recording and integrity in Zoom

A Zoom meeting is processing personal data

According to GDPR bot a live meeting and a recording of such constitutes processing personal data. Recording is considered to be a larger infraction into the personal integrity of the participants, than a meeting that is not recorded. Therefore, a meeting should not be recorded simply because it is technically possible, but there must be a well-thought-out purpose with the recording taking its basis in one of the legal grounds for processing personal data that GDPR states.

Don't discuss sensitive or confidential information in a Zoom meeting

LU Zoom is not an appropriate channel for discussions on sensitive personal data nor confidential information, regardless of the meeting being recorded or not.

Teaching via Zoom

If you are participating in education via Zoom, and this meeting is being recorded, it is because the teacher has deemed it necessary in order to be able to carry out the instruction or examination.

The recording is originally only stored locally on the teacher's computer. The teacher then decides if there is also a need to publish this recording; the standard method of publication for this type of recordings are in Canvas at the space provided for the course in question. It is also the teacher that decides how long this recording will be available; normally this will be as long as the mentioned course space is available in Canvas. Information on publishing should have been given to you as a participant in the meeting - especially if it diverges from the above stated standard procedure. If you have not been given this information, don't hesitate to ask!

Other meetings via Zoom

LU Zoom is also used for a variety of other kinds of meetings at Lund University. Some of these meetings are part of the Lund University execution of authority while others are more informal meetings between equals. Therefore it is not possible to determine a common legal ground for the processing of personal data that a recording of these meeting stand upon. Instead, for each meeting this legal ground has to be determined and information on this given to the participants. I these cases, there is no preferred channel for an eventual publication, nor a natural end date for such a publication; this also needs to be determined on a meeting-to-meeting basis. The recording is originally stored only locally on the computer of the recording participant. Any publication needs to be agreed upon between the participants in the meeting.

Limit the intrusion into your personal integrity

To minimise the intrusion into your personal integrity that a recording may entail, you can - if the nature of the meeting allows it - either turn off your web camera (to prevent you appearing with image in the recording) and/or the microphone (to prevent you from appearing with sound in the recording). If you want or need to participate with image and/or sound, it is a good idea to choose a location that minimises the amount of information you share by for the meeting irrelevant background images or sound. It is also a good idea to turn off the microphone when you yourself are not speaking. You can also choose to use a virtual background, so the room you are in wont be recorded.

Processing of personal data at Lund University

Lunds University (Box 117, 221 00 LUND, phone. +46 - 46-222 00 00, registratorluse 202100-3211) is the personal data controller according to GDPR for this processing of personal data. Contact for LU Zoom is Lotta Åbjörnsson, email lotta.abjornssonahu.luse Email to the Data Protection Officer  General information on the processing of personal data at Lund UniversityInformation for staff on personal data and data protectionPersonal data processing in remote teaching and examination