Bendigo Bank

Comprehensive scope coverage with clear entity definitions, detailed contact information, structured navigation, and current publication date. Strong introductory summary and policy availability commitments exceed basic requirements.

Clear primary purposes stated with good AI/analytics use disclosure and explicit purpose limitation commitment. Marketing opt-out available, though some secondary use areas could be more detailed.

Adequate review and notification processes with clear contact details and compliance commitments. Staff obligations and third-party agreements covered, but lacks specific review frequency timeframes and detailed governance framework.

Good specificity in data types collected including sensitive information, clear collection methods, and legal basis disclosure. Strong coverage of automated collection and tracking technologies, though some categories could be more granular.

Excellent specificity with named categories of recipients, clear purposes, contractual protections, and explicit no-sale commitment. Strong coverage of consent mechanisms and overseas sharing with specific countries listed.

Adequate general security commitments with some specific measures like controlled facilities and employee obligations. Third-party security requirements mentioned, but lacks specific technical measures like encryption details or certifications.

Good country-specific disclosure with 20 named jurisdictions and clear circumstances for transfers. However, safeguards are described generically without specific adequacy mechanisms or binding corporate rules.

Good coverage of access, correction, and opt-out rights with clear OAIC complaint escalation details. Prompt response commitments provided, though specific timeframes for access requests could be clearer.

Basic AI usage disclosure with some purposes identified, but lacks opt-out rights, human review options, or transparency about decision logic. Limited governance framework for automated decisions.

No relevant claims found in policy.

No specific findings.