> what is the maximum possible harm zoom could have caused? + HIPAA violation + Violation of jury secrecy + FERPA violation + False advertising and fraud T

> what is the maximum possible harm zoom could have caused? + HIPAA violation + Violation of jury secrecy + FERPA violation + False advertising and fraud That's US specific. I'm sure foreign governments will have their own opinions. You're right, you can be HIPAA compliant and not be E2E encrypted - if you have the right paperwork and auditing process. Zoom didn't because they claimed to be E2E encrypted. There are some things you can lie about and it's crappy but not a big deal. "Lag free video streaming!" - Sure, whatever. "The best quality!" Again, don't care. When it comes to information security claims though, lying has very serious penalties because the damage you cause is extremely serious. This wasn't them telling a white lie about how awesome they are, this is them intentionally and knowingly engaging in fraudulant behavior to make profit at the expense and security of users - and we should absolutely punish the hell out of people who do that to line their own pockets with a few extra dollars.