# Clarification on Data Compliance API

**URL:** <https://devforum.zoom.us/t/clarification-on-data-compliance-api/10486>\
**Category:** App Marketplace\
**Created:** [April 1, 2020, 3:32pm UTC](https://devforum.zoom.us/t/clarification-on-data-compliance-api/10486 "2020-04-01T15:32:36Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![konstantin.geyst](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/konstantin.geyst/32/3084_2.png) [@konstantin.geyst](https://devforum.zoom.us/u/konstantin.geyst)\
**Post date:** [April 1, 2020, 3:32pm UTC](https://devforum.zoom.us/t/clarification-on-data-compliance-api/10486/1 "2020-04-01T15:32:36Z")

</div>

Is Data Compliance API a hard requirement for an already published application if we only change the scopes? The app was published before Data Compliance API was introduced. Our application already deletes user data properly as required, it just doesn’t invoke the appropriate API to notify about it.

I already asked this previously [here](https://devforum.zoom.us/t/scope-change-for-an-existing-published-app/8821):

> Good question, I believe you need to implement the Data Compliance API. Abe can confirm that once you are in the app update process.

However, I am asked to find this all out before we are in the app update process. Additional question: are there some sort of sanctions for not following the process correctly (for whatever reasons, for example, a network error or a bug)? I assume API calls are monitored?

Thank you very much in advance.

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [April 1, 2020, 9:05pm UTC](https://devforum.zoom.us/t/clarification-on-data-compliance-api/10486/2 "2020-04-01T21:05:42Z")

</div>

Hey @konstantin.geyst,

Yes we will ask you to implement the [Data Compliance Deauth flow](https://marketplace.zoom.us/docs/guides/app-lifecycle-management/data-compliance). It is pretty simple, just a webhook sent to your server, and you make an API request.

Thanks for your understanding,  
Tommy

---

<div class="post-metadata">

**Author:** ![DeveloperBot](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/developerbot/32/12632_2.png) [@DeveloperBot](https://devforum.zoom.us/u/DeveloperBot)\
**Post date:** [August 21, 2020, 7:41pm UTC](https://devforum.zoom.us/t/clarification-on-data-compliance-api/10486/3 "2020-08-21T19:41:54Z")

</div>

Closed on August 21, 2020, 7:41pm UTC