Is Zoom a safe tool for online dental education?
LEIPZIG, Germany: During the COVID-19 pandemic, virtual meetings, teledentistry and online education have become more important than ever. There are many remote conferencing services from which associations and companies can choose in order to hold events, organise webinars or consult patients. Many seem to have chosen an increasingly popular platform called Zoom Meetings for these purposes. This is the chief product of Zoom Video Communications, which is based in San Jose in California in the US. However, Zoom has received strong criticism for its data collection practices and several other security issues.
An analysis by IT security expert Mike Kuketz showed that Zoom passes on user data to various service providers, not only when users visit the website, but also after they have logged in with their own profile. “Here, everything and anything gets collected in a heartbeat,” wrote the computer scientist, who also works for the German federal state of Baden-Württemberg, in a blog entry. “Against this background, the use of Zoom is strongly discouraged,” he concluded.
Zoom for online dental education
The coronavirus crisis has forced the dental industry to radically change its thinking. Webinars, for example, have always been a popular tool for dentists to conveniently continue their education and earn continuing education (CE) credits from the comfort of their own homes. However, now they are more important than ever, since congresses, meetings and other events cannot take place owing to travel and gathering bans. Currently, professional associations such as the American Dental Association (ADA) and companies like the Israeli company MIS Implants Technologies use Zoom to host their webinars.
In answer to the question by Dental Tribune International asking whether the ADA is aware of the criticism, the association said that it was indeed aware of recent concerns about videoconferencing cybersecurity. The ADA is a large organisation with over 163,000 member dentists and uses a variety of communication tools to support the advancement of the profession and the health of the public they serve. According to the ADA, the selection of the tools it uses is based on a variety of considerations, such as reliability, ease of use for participants, cost to provide the service and appropriateness of security safeguards to the sensitivity of the content. The ADA stresses that it works with its service providers to help ensure users have the best experience possible.
Difference to accredited CE platforms
In an interview with Dental Tribune International, lawyer Dr Carsten Ulbricht from Stuttgart in Germany explained that the webinar hosts are obligated to ensure the safety on their end as well in order to protect the viewers. He recommends that a data processing contract should be concluded with Zoom. He added, “The settings should be selected by the administrator so that the data processing is limited to the necessary extent and the conference participants are adequately informed about the data processing on the part of the organising company and Zoom itself.”
As mentioned, Zoom is also useful in dentistry outside of online seminars. Daily, sometimes even multiple times a day, virtual press conferences are held by the World Health Organization in order to update information about the development of COVID-19. The University of Michigan School of Dentistry even uses it as a tool for teledentistry. Patients need to give consent for this interaction. However, it is unclear how Zoom further processes discussions that take place during the examination. In terms of data protection laws, its use is still is highly questionable.
“Just because something is okay under data protection law does not mean that it is data protection-friendly” – Mike Kuketz
Some have banned the use of Zoom
While the rewrite is significant and provides some improvements, the UK Ministry of Defence, SpaceX and NASA—just to name a few organisations—have banned the use of Zoom in order to protect sensitive information like matters of national security. Consumer Reports also continues to urge caution and has shared tips on how privacy can be protected when participating in Zoom calls. This includes asking the host to turn on a feature that requires participants to provide consent before a recording can begin, to turn off the microphone and/or camera unless one is actually speaking and to choose a different background photograph.
Despite all the security measures that users can implement themselves, Kuketz’s assessment remains the same. “It may be that the use of Zoom is in accordance with data protection laws. But you can only be sure of this when you know all the data flows. But I would like to point out that just because something is okay under data protection law does not mean that it is data protection-friendly. And there is one thing Zoom is certainly not: data protection-friendly,” he concluded.