ACS

Comprehensive transparency with detailed scope statement covering multiple entities, complete definitions section, table of contents with page numbers, specific privacy officer contact details, version control, and clear introductory commitments.

Comprehensive list of primary collection purposes, clear secondary use limitations requiring consent or legal basis, specific marketing opt-out mechanisms, and data minimisation principle implementation.

Annual review frequency specified, version control documented, named privacy officer with complete contact details, governance framework with responsible units identified, and compliance monitoring processes described.

Highly detailed enumeration of personal information types collected with specific categories, clear collection methods disclosed, sensitive information handling with consent requirements, and data minimisation principles applied.

Specific third-party categories and named recipients disclosed with clear purposes, contractual obligations detailed, cross-border safeguards specified, and strong commitment against data selling with exceptions clearly stated.

Good security measures including encryption, multi-factor authentication, ISO 27001 certification, breach response plan, and third-party security requirements, though some areas lack specific technical details.

Specific countries named (Japan, US), ASD certification disclosed, comprehensive safeguards including standard contractual clauses and binding corporate rules, with clear obligations for overseas recipients.

Clear access and correction rights with specific mechanisms for members and non-members, defined response timeframes (30 days), complaint escalation to OAIC, and withdrawal of consent rights provided.

Adequate disclosure that no significant automated decisions are made, profiling acknowledged for personalisation purposes, human review available, but limited detail on logic and opt-out mechanisms beyond cookie settings.

No relevant claims found in policy.