The HCC, or Health Care Component, is a group of faculty, students, or staff who work closely with private health information and are subject to a Business Associates Agreement (BAA) with Zoom to ensure HIPAA compliance. Because users in the HCC have access to Protected Health Information (PHI) and/or HIPAA data, they are required to use a slightly different instance of Zoom.
While both instances of Zoom are secure, the Zoom HCC structure is designed to reduce the risk of possible non-compliance with Protected Health Information (PHI).
Note: Only members of the HCC with BAA designation are required to complete the HCC Zoom training. Which account type do I have?
Key Differences Between Non-HCC Zoom and HCC Zoom
Use the table below to identify differences between the HCC and Non-HCC Zoom instances. The requirements for HCC Zoom are automatically applied when a user accesses the HCC Zoom instance.
- Zoom Feature column: Lists a Zoom feature and the applicable requirement for the HCC Zoom instance.
- Description column: Describes the Non-HCC instance functionality. Bolded text indicates HCC Zoom instance functionality difference.
- Reason for Difference column: Explains the rationale for the Zoom feature difference.
Zoom Feature |
Description |
Reason for Difference |
| End-to-end Encryption: Required ON for HCC |
All meetings are encrypted. |
Required by Zoom. |
| Auto-Save Chat: DISABLED for HCC |
Automatically save all in-meeting chats so that hosts do not need to manually save the text of the chat after the meeting starts. The HCC instance prevents auto-saving of chat. | Prevent PHI data from being transmitted or stored in a non-approved environment. |
| Save Transcript: DISABLED for HCC |
Save Transcripts created through the Automatic Transcription feature. The HCC instance prevents saving the transcript. | Prevent PHI data from being transmitted or stored in a non-approved environment. |
| Poll Reports: Identification of participants DISABLED for HCC | After participants complete a poll non-anonymously, Hosts can review responses in the Poll report. The HCC instance prevents identification of the poll participants. | Required by University Information Security risk assessment. |
| File Transfer: DISABLED for HCC |
Send files through the in-meeting chat. The HCC instance prevents file transfer. | Prevent PHI data from being transmitted or stored in a non-approved environment. |
| Remote Control: DISABLED for HCC |
During screen sharing, the person who is sharing can allow others to control the shared content. The HCC instance prevents remote control. | Required by University Information Security risk assessment. |
| Remote Support: DISABLED for HCC |
Give remote support to another participant. The HCC instance prevents remote support. | Required by University Information Security risk assessment. |
|
Identify Guest Participants: |
The meeting/webinar participant list indicates who is a UMN person and who is not. The HCC instance requires identification of guests. | Required for awareness of who is attending the online meeting when discussing sensitive data. |
|
Zoom Cloud Recording: |
Record meetings and webinars to Zoom Cloud. Staff, faculty, departmental, sponsored accounts and students can record meetings to a local MP4 file. | Required by University Information Security risk assessment. |
|
Live Stream Meetings: |
Live stream meetings to Workplace by Facebook or Custom Live Streaming Service. The HCC instance prevents live streaming. | Prevent PHI from being transmitted or stored in a non-approved environment such as Facebook or YouTube Live. |
|
Download Webinar Registration: |
Save a list of webinar registrants and attendees. The HCC instance replaces names and email addresses in meeting registration reports with an asterisk (*) to protect PHI. | Required by Zoom. |
|
Designate Alternative Hosts |
Hosts can only designate alternative hosts from within the same account. For example, a user in the HCC Zoom account can only designate another HCC Zoom user as alternative host. |
Required by Zoom. |