QBE Insurance

Comprehensive scope statement, clear contact information with regional specifics, structured sections with overview, and current version tracking. Strong transparency features with minor gaps in explicit plain language commitment.

Clearly stated collection purposes with specific examples, legal basis framework well-articulated, and marketing opt-out mechanisms provided. Strong purpose limitation with good consent mechanisms.

Named Group Privacy Officer with reporting structure, governance framework detailed, staff training commitments specified, and update notification methods described. Strong maintenance framework with specific roles and responsibilities.

Clear enumeration of data types collected both automatically and voluntarily, with specific collection methods and legal bases disclosed. Good specificity but could be more granular in sensitive data handling.

Named categories of recipients with specific purposes, contractual obligations detailed, and some named locations (Philippines). Strong safeguards disclosed but lacks more specific third-party names.

Specific encryption method (TLS) disclosed, employee training detailed, and general security measures described. Good technical specifics but lacks certifications or audit practices disclosure.

Named countries/regions specified, intra-group transfer agreements detailed with Standard Contractual Clauses, adequacy assessment process described, and specific Philippines service centre disclosed. Comprehensive cross-border protections.

Comprehensive rights disclosure including access, correction, erasure, and marketing opt-out with clear mechanisms and OAIC complaint escalation. Strong timeframe commitments and identity verification processes.

No relevant claims found in policy.

No relevant claims found in policy.

No specific findings.