Regulators Urge Video Conferencing Companies to Improve Security, Privacy

mood · Jul 23, 2020

Regulators Urge Video Conferencing Companies to Improve Security, Privacy
July 23, 2020
https://www.securityweek.com/regulators-urge-video-conferencing-companies-improve-security-privacy

The regulatory community, which is responsible for ensuring the privacy of individuals worldwide, is concerned that the increased use of video conferencing solutions as a result of the COVID-19 pandemic has heightened the risks associated with the handling of personal information by VTC companies, and has created additional risks as well.

“Reports in the media, and directly to us as privacy enforcement authorities, indicate the realization of these risks in some cases. This has given us cause for concern as to whether the safeguards and measures put in place by VTC companies are keeping pace with the rapidly increasing risk profile of the personal information they process,” the letter reads.
In addition to voicing their concerns, the privacy watchdogs detailed their expectations regarding the manner in which video conferencing companies are expected to mitigate said risks, as well as the steps they should take to ensure they secure the personal information of users.
Click to expand...

VTC companies should ensure that their solutions include security safeguards by default, such as effective end-to-end encryption and two-factor authentication, and that they demand strong passwords.

“Particular attention should also be paid to ensuring that information is adequately protected when processed by third-parties, including in other countries,” the letter reads.
Click to expand...

ESET: Privacy watchdogs urge videoconferencing services to boost privacy protections

The open letter highlights five security and privacy principles that require heightened attention from videoconferencing services
Six data protection and privacy authorities from countries in four continents have addressed an open letter to video teleconferencing (VTC) companies, asking them to re-evaluate how they safeguard the privacy rights and data of citizens around the globe.
Click to expand...

mood · Oct 28, 2021

Video conferencing platforms must improve privacy for users, data protection authorities warn
New cross-country report highlights need for better policies
October 28, 2021
https://portswigger.net/daily-swig/...cy-for-users-data-protection-authorities-warn

Six national data protection and privacy authorities have released their findings after an investigation into video teleconferencing (VTC) companies’ practices.

The bodies, from Australia, Canada, Gibraltar, Hong Kong, China, Switzerland, and the UK, are broadly happy with the level of engagement from the companies concerned, but are calling for improvements to their privacy measures.
Click to expand...

With the use of teleconferencing rocketing as the Covid-19 pandemic took hold, the authorities last summer asked Microsoft, Google, Cisco, Zoom, and Houseparty to explain their privacy and security measures. All but Houseparty responded.
Findings
“The dialogue between VTC companies and data protection authorities has proven effective, efficient, and mutually beneficial,” say the authorities in their report.

The report (PDF) sets out a number of recommendations. They call on VTC companies to make end-to-end encryption available to all users, and to be the default for one-to-one calls of a sensitive nature, such as tele-health communications.
Click to expand...

Finally, the authorities are calling for VTC companies to be completely transparent about where data is stored and how it is routed, and where possible giving users a choice.
They should also implement measures, contractual or otherwise, to ensure that information is adequately protected when shared with third parties, including in foreign jurisdictions.

However, in a recent report, the Center for Strategic and International Studies (CSIS) found that the cybersecurity and privacy risks of VTC services are no greater than those found on the internet in general.

“Instead, the leading services have all begun to converge in the security and convenience of their apps,” it concluded.
Click to expand...

Log in or Sign up

Regulators Urge Video Conferencing Companies to Improve Security, Privacy

mood Updates Team

mood Updates Team