After consultation with stakeholders on campus, Information Security has updated their guidelines on the use of Zoom.
While much of the guidance on security concerns and best-practices remains the same, a new section has been added to include a number of additional approved use cases for Zoom on campus, which now includes minimal risk human subject research studies. This expanded approval aligns with the exception requests that have been granted over the past year.
Zoom can be used without an exception for research protocols that do not involve sensitive data (i.e., health information) and where the Research Ethics Board has classified the study as minimal risk.
The updated guideline can be found at Information Security Statement on Web Conferencing Solutions.
If there are any questions or concerns, please feel free to contact Steve Willem, Chief Information Security Officer, at firstname.lastname@example.org directly.