Zoom agreed to pay $85 million to settle a class action lawsuit alleging the company shared user video data with Facebook, Google, and LinkedIn without consent. The settlement, which received final court approval in January 2026, affects approximately 160 million eligible users. Zoom’s practice of transmitting user session data to these third parties—often for advertising and analytics purposes—happened without explicit user permission and became a central issue in privacy litigation that lasted years.
The broader complaint accused Zoom of multiple privacy violations beyond data sharing. Users claimed the company also failed to implement adequate security measures to prevent unauthorized access to video meetings, a problem known as “Zoombombing.” Additionally, Zoom faced separate allegations that it falsely marketed meetings as “end-to-end encrypted” when the encryption was incomplete or not applied during certain technical processes. These combined allegations painted a picture of a company that prioritized growth and functionality over user privacy protections.
Table of Contents
- What Data Did Zoom Share and Why Does It Matter?
- Settlement Payment Details and Who Qualifies
- The Encryption Misrepresentation Claims
- How to File a Claim in This Settlement
- Limitations and Gaps in the Settlement
- The Separate Investor Settlement and Its Implications
- Timeline and Settlement Status as of 2026
What Data Did Zoom Share and Why Does It Matter?
Zoom’s data-sharing practices involved transmitting identifying information about users and their meeting activity to major technology companies. When users joined a Zoom call, the platform collected session metadata—information about who was on the call, when it happened, and technical details about the connection. Rather than keeping this data purely internal, Zoom sent identifying data to Facebook, Google, and LinkedIn, often without users realizing it or explicitly agreeing to it. The practical impact of this data sharing extended beyond abstract privacy violations. For example, users who attended a Zoom call might later see targeted advertisements from Facebook or LinkedIn that seemed connected to meeting content they’d discussed—suggesting those companies had received information about the user’s activity on Zoom.
This type of targeted advertising became possible precisely because Zoom transmitted data to these platforms. The lawsuit emphasized that users never affirmatively agreed to this practice when they signed up for Zoom or joined individual calls. Why this matters: Zoom’s user base includes healthcare providers, financial advisors, lawyers, and other professionals who handle sensitive information. When Zoom shared session data with advertising platforms, it potentially exposed information about what types of meetings and participants were involved. A lawyer’s client might be targeted by ads after a confidential call, or a therapist’s patient might receive advertisements suggesting the platform knew about their participation in a mental health call.
Settlement Payment Details and Who Qualifies
The $85 million settlement is divided between two categories of Zoom users based on their subscription status. Paid subscribers—those who maintain a Zoom account with an active paid plan—are eligible to receive either a 15% refund on their core subscription fees or $25, whichever is greater. For many users who maintained yearly subscriptions costing $15.99 to $25.99 per month, the 15% refund translates to meaningful compensation. Non-paying users and free account holders receive $15 each. While this amount is smaller than the paid subscriber benefit, it recognizes that free users’ data was also allegedly shared without consent, even though they never paid for the service.
The settlement administrator estimates approximately 160 million people fall within these two eligible groups, though actual claim rates historically run lower as many eligible individuals never file for compensation. One important limitation: Settlement payments are not automatic. Users must actually submit a claim to receive compensation—Zoom will not track down eligible users and send checks. This is a critical distinction from some settlements where payments are distributed automatically. Many eligible individuals miss the claims deadline or never learn about the settlement at all. The official settlement website, zoommeetingsclassaction.com, maintains claim filing information and deadlines, though specific claim windows may have closing dates that have already passed depending on when you’re reading this.
The Encryption Misrepresentation Claims
A secondary but significant allegation involved Zoom’s marketing of meeting security. Zoom advertised that meetings offered “end-to-end encryption,” suggesting that only meeting participants could access and view the video and audio content. However, investigations revealed that Zoom’s encryption implementation was incomplete. During certain technical processes—particularly when Zoom’s servers were involved in connecting participants or recording sessions—the encryption was not fully applied, allowing Zoom employees and potentially others to access unencrypted meeting content. This became especially problematic for users who believed they were conducting completely private conversations.
A company holding a confidential strategy meeting under the assumption that Zoom couldn’t access the content, or a therapy client assuming their session was fully encrypted, both had a false sense of privacy. Zoom’s marketing claims suggested a level of security that the actual technical implementation did not deliver. The company later acknowledged these technical limitations and updated its marketing language, but by then many users had already relied on false security claims. The encryption issue ties directly to data sharing because users who thought their meetings were fully encrypted and private would have been even more concerned to learn that Zoom was extracting and sharing identifiable data from those supposedly-secure sessions. The combined effect—false security claims plus unauthorized data sharing—created multiple layers of privacy violation that the litigation addressed.
How to File a Claim in This Settlement
If you used Zoom during the relevant class period (January 1, 2014 through October 31, 2020 for most claims), you may be eligible to file. The process typically begins by visiting the official settlement website, zoommeetingsclassaction.com, where you can verify your eligibility and submit your claim. You’ll need to provide basic information such as your email address associated with your Zoom account and potentially evidence of your subscription status during the relevant period. For paid subscribers, you may need to provide proof of payment or subscription, such as a credit card statement, email receipt, or Zoom account information. Free users simply need to verify they had an account.
The settlement administrator reviews claims to prevent fraud—people cannot file multiple claims for the same account or claim payments for family members’ accounts without separate eligible participation. Filing typically takes less than 15 minutes if you have the necessary information available. One important consideration: claim deadlines are strict. Once a final claims deadline passes, you generally cannot file a late claim unless you have exceptional circumstances. These deadlines are set by the court during the settlement approval process. If you believe you’re eligible, filing sooner rather than later reduces the risk of missing a critical deadline by assuming you’ll remember to do it later.
Limitations and Gaps in the Settlement
The $85 million settlement, while significant in absolute terms, distributes across 160 million eligible people, resulting in modest per-person payouts for most users. When you account for attorney fees (typically 25-33% of settlements) and administrative costs, the actual money reaching individual users shrinks further. For free account users receiving $15, this amount may not feel proportional to the privacy violation experienced, particularly if meeting data was shared dozens or hundreds of times without their knowledge. Another limitation involves proof of damage.
The settlement compensates users based on account status rather than on documented harm—you don’t need to prove that your data was specifically misused, that you saw targeted ads, or that you suffered financial loss. Conversely, this also means some users who experienced significant harm (such as a professional whose confidential client information was exposed) receive the same payment as someone whose data was shared but who never noticed any consequences. The settlement is a one-time payment that doesn’t address ongoing privacy concerns or future data security at Zoom. Additionally, the settlement does not require Zoom to fundamentally restructure how it handles third-party data sharing going forward, beyond commitments to be more transparent. Competitors’ practices and industry standards have evolved significantly since 2014-2020, but the settlement focuses on compensation for past behavior rather than preventing similar future violations.
The Separate Investor Settlement and Its Implications
Alongside the $85 million consumer settlement, Zoom also settled a separate $150 million class action lawsuit brought by shareholders and investors. That litigation addressed different harm—investors who bought Zoom stock alleged they were misled about the company’s privacy and security practices and sold their shares believing false claims about encryption and data protection. When privacy concerns became public in 2020, Zoom’s stock price initially declined, and investors claimed they suffered financial losses because the company had misrepresented its security posture.
The investor settlement reflects that Zoom’s privacy problems affected multiple constituencies, not just end users. When a company makes false claims about product security to sell subscriptions to consumers, it also makes false claims to investors who evaluate the company’s reputation and risk profile. The $150 million investor payout is separate from and in addition to the $85 million consumer settlement, meaning Zoom paid a combined $235 million in settlements related to these privacy and encryption claims.
Timeline and Settlement Status as of 2026
The litigation process for this settlement spanned several years. The original privacy lawsuit was filed in 2020, following media revelations about Zoom’s data-sharing practices and security gaps. After years of litigation, negotiation, and preliminary court approvals, the settlement received final approval from the U.S. District Court, Northern District of California in January 2026. The case number is 3:20-cv-02155-LB.
Final approval means the court has confirmed the settlement amount is fair, the notice to eligible class members was adequate, and the claims process can proceed. With final approval in place as of January 2026, the claims window for eligible users has opened (or may still be open depending on the current date relative to court-set deadlines). Users who were aware of the settlement filed claims immediately; others may have missed early filing windows. Some settlements allow claims for several years after final approval, while others have stricter deadlines. Checking the official settlement administrator’s website for your specific claim deadline is essential—missing the final deadline means forfeiting your eligibility for compensation, regardless of whether you qualified.
- —