[jonReadingNews]

The blog post your company just published confirms this:

Account owners or administrators (“customers”) provide consent. Participants receive notice.

Gross and disappointing.

[lucb1e]

That's not how consent works in the GDPR legal sense. (But maybe that's not something Zoom USA cares about if an insignificant amount of profit comes from EU.)