Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Zoom terms now allow training AI on user content with no opt out

explore.zoom.us

Post reply on HN
Print view View original

501–510 of 538 posts

Re: Zoom terms now allow training AI on user content with no opt out

#501

Post by johndhi »

haldujai wrote: post #458
johndhi wrote: post #451

Earlier quoted context omitted.

Imo the law basically says you can do this with PHI: -De-identify it then do whatever you want with it -use it to provide some service for the covered entity, but not for anyone else -enter a special research contract if you want to use it slightly de-identified for some other specific purpose

One note is that the act of deidentification itself requires accessing PHI when done retroactively, this may be institutional policy or specific to covered entities but per the privacy office lawyers such access (apart from a small dataset) requires a permitted use to be accessible in order to then deidentify and use freely. As with all things HIPAA, this only becomes a problem when HHS starts looking and I’m sure in…

This is correct -- the covered entity can de-identify data, or ask the BA to de-identify data. If the BAA says the BA can, then they can.

Re: Zoom terms now allow training AI on user content with no opt out

#502

Post by johndhi »

haldujai wrote: post #459
johndhi wrote: post #450

Earlier quoted context omitted.

Haha wow this is a great post. I am a lawyer and you may have solved a problem I recently encountered. So you think this is saying that generic language in the Zoom BAA constitutes permission to de-identify? Are there examples of healthcare ai chatbots trained on de-id data btw? If you're familiar would love to see. What's your line of work out of curiosity?

> Haha wow this is a great post. I am a lawyer and you may have solved a problem I recently encountered. So you think this is saying that generic language in the Zoom BAA constitutes permission to de-identify? Not that I’m an expert on the nuance here but I think it gives them permission to use PHI, especially if spun in the correct way, which then gives them permission to deid and do whatever with. My experience has…

Awesome. Thank you!

Re: Zoom terms now allow training AI on user content with no opt out

#503

Post by catlifeonmars »

Tokumei-no-hito wrote: post #413
catlifeonmars wrote: post #335

Earlier quoted context omitted.

> How else can they train a closed caption system like everyone else has? They need data for it. This is where zero knowledge federated learning comes in. Unfortunately, this is very much a tomorrow technology (it needs the infrastructure to support it). Why invest in privacy-preserving methods for training machine learning models tomorrow when you can steal users private information today (or even better, bully them…

What is federated learning? And by zero proof is that the same as ZKP?

An example of a federated learning scheme: https://ai.googleblog.com/2017/04/federated-learning-collabo...

Perhaps zero knowledge is a poor choice of terms on my part as it is used in ZKP (as you pointed out). What I meant is “privacy-preserving”.

Re: Zoom terms now allow training AI on user content with no opt out

#504

Post by infanteaj »

aparnabzoom wrote: post #462

Hi there - this is Aparna from Zoom, our Chief Operating Officer. Thank you for your care and concern for our customers - we are grateful for the opportunity to double click on how we treat customer content. To clarify, Zoom customers decide whether to enable generative AI features (recently launched on a free trial basis) and separately whether to share customer content with Zoom for product improvement purposes. Al…

I certainly do not want my private chats, meetings, nor any non-public company information shared with anyone else. This seems like a massive privacy breach. Where is the opt-out to disable this?

Re: Zoom terms now allow training AI on user content with no opt out

#506

Post by soco »

pclmulqdq wrote: post #115
Gasp0de wrote: post #108

Earlier quoted context omitted.

You can just have a conference call with the 5-10 speakers and use broadcasting software to stream it to the audience, why do they need to be in the conference?

Live Q&A is a nice feature.

In my experience there will be always some guy ranting for minutes so I learned to really appreciate town halls with a few speakers and taking questions written in the chat.

Re: Zoom terms now allow training AI on user content with no opt out

#507

Post by brunes »

It is depressing how few people seem to be able to read or understand basic legal text nowadays.

Service Generated Data is *very clearly defined* to not include user generated data. Service Genrated Data would include data like APM, error logs, aggregate stats around how many customers use features. None of this data us PII.

It is depressing how many CISOs and others reposted this drivel.

Re: Zoom terms now allow training AI on user content with no opt out

#508

Post by brunes »

danShumway wrote: post #397

Tangentially related, but a number of telehealth operations with hospitals/therapists/etc... use Zoom -- I suspect because their clients can connect without an app or an account over a browser. When you join a Zoom session over the browser, you don't sign a TOS. And I assume that actual licensed medical establishments are under their own TOS provisions that are compatible with HIPPA requirements. Training on voice-to…

It's not a privacy violation because Service Generated Data is not PII.

All of this is a lot of BS about nothing.

Re: Zoom terms now allow training AI on user content with no opt out

#509

Post by brunes »

jxf wrote: post #36

edit: I'm retracting my earlier comment. Earlier I wrote that the headline didn't seem to match what was in the TOS, since OP never mentioned which part they're concerned about. I'm now assuming the part they don't like is §10.4(ii): > 10.4 Customer License Grant. You agree to grant and hereby grant Zoom a perpetual, worldwide, non-exclusive, royalty-free, sublicensable, and transferable license and all other rights…

You are misreading and misunderstanding this whole paragraph.

The purpose of 10.4 is to allow zoom to send your call to other services, like say YouTube for live streaming, or any of the dozens of other services that integrate with their APIs. Without 10.4, three quarters or more of Zooms use cases would no longer work.

Re: Zoom terms now allow training AI on user content with no opt out

#510

Post by jech »

samspenc wrote: post #368
rapnie wrote: post #203

Earlier quoted context omitted.

Self-hosting Jitsi is the better option. Or BigBlueButton, and there are more self-hosted open-source Zoom alternatives.

Do you happen to know of others by any chance. For self-hosted video call solutions, looks like Jitsi and BigBlueButton (BBB) are the only decent options out there.

> Do you happen to know of others by any chance.

There's Galene, https://galene.org>. It's easy to deploy, uses minimal server resources, and the server is pretty solid. The client interface is still a little awkward, though. (Full disclosure, I'm the main author.)

Post reply on HN