Zoom: Compare the HCC and Non-HCC Instances of Zoom

The HCC, or Health Care Component, is a group of faculty, students, or staff who work closely with private health information and are subject to a Business Associates Agreement (BAA) with Zoom to ensure HIPAA compliance. Because users in the HCC have access to Protected Health Information (PHI) and/or HIPAA data, they are required to use a slightly different instance of Zoom. 

While both instances of Zoom are secure, the Zoom HCC structure is designed to reduce the risk of possible non-compliance with Protected Health Information (PHI). 

Note: Only members of the HCC with BAA designation are required to complete the HCC Zoom training. Which account type do I have?

Key Differences Between Non-HCC Zoom and HCC Zoom

Use the table below to identify differences between the HCC and Non-HCC Zoom instances. The requirements for HCC Zoom are automatically applied when a user accesses the HCC Zoom instance.

  • Zoom Feature column: Lists a Zoom feature and the applicable requirement for the HCC Zoom instance.
  • Description column: Describes the Non-HCC instance functionality. Bolded text indicates HCC Zoom instance functionality difference.
  • Reason for Difference column: Explains the rationale for the Zoom feature difference.
 

Zoom Feature

Description

Reason for Difference

End-to-end Encryption:
Required ON for HCC

All meetings are encrypted.

Required by Zoom.
Auto-Save Chat:
DISABLED for HCC
Automatically save all in-meeting chats so that hosts do not need to manually save the text of the chat after the meeting starts. The HCC instance prevents auto-saving of chat.  Prevent PHI data from being transmitted or stored in a non-approved environment.
Save Transcript:
DISABLED for HCC
Save Transcripts created through the Automatic Transcription feature. The HCC instance prevents saving the transcript.  Prevent PHI data from being transmitted or stored in a non-approved environment.
Poll Reports: Identification of participants DISABLED for HCC After participants complete a poll non-anonymously, Hosts can review responses in the Poll report. The HCC instance prevents identification of the poll participants. Required by University Information Security risk assessment.
File Transfer:
DISABLED for HCC
Send files through the in-meeting chat. The HCC instance prevents file transfer.  Prevent PHI data from being transmitted or stored in a non-approved environment.
Remote Control:
DISABLED for HCC
During screen sharing, the person who is sharing can allow others to control the shared content. The HCC instance prevents remote control.  Required by University Information Security risk assessment.
Remote Support:
DISABLED for HCC
Give remote support to another participant. The HCC instance prevents remote support.  Required by University Information Security risk assessment.

Identify Guest Participants:
Required ON for HCC

The meeting/webinar participant list indicates who is a UMN person and who is not. The HCC instance requires identification of guests.  Required for awareness of who is attending the online meeting when discussing sensitive data.

Zoom Cloud Recording:
DISABLED for HCC

Record meetings and webinars to Zoom Cloud. Staff, faculty, departmental, sponsored accounts and students can record meetings to a local MP4 file. Required by University Information Security risk assessment.

Live Stream Meetings:
DISABLED for HCC

Live stream meetings to Workplace by Facebook or Custom Live Streaming Service. The HCC instance prevents live streaming.   Prevent PHI from being transmitted or stored in a non-approved environment such as Facebook or YouTube Live.

Download Webinar Registration:
DISABLED for HCC

Save a list of webinar registrants and attendees. The HCC instance replaces names and email addresses in meeting registration reports with an asterisk (*) to protect PHI. Required by Zoom.

Designate Alternative Hosts

Hosts can only designate alternative hosts from within the same account. For example, a user in the HCC Zoom account can only designate another HCC Zoom user as alternative host. 

Required by Zoom.