Unitywater

Comprehensive policy with clear scope, detailed table of contents, definitions section, specific contact information, version control, and strong introductory statements. Well-structured with good navigation aids.

Comprehensive primary purpose statements with clear secondary use conditions. Strong consent framework and explicit limitation principles with detailed circumstances for permitted uses.

Strong governance framework with named roles (CFO, Privacy Officer), detailed accountability structures, version control with specific dates, Privacy Impact Assessment oversight, and comprehensive compliance monitoring commitments.

Extensive enumeration of specific data types collected, clear collection methods disclosed, detailed sensitive information handling, and strong legal basis statements. Goes beyond generic categories with granular specificity.

Clear disclosure of sharing categories and overseas locations with specific countries named. Good contractual protection commitments, though could be more specific about named recipients rather than categories.

Lists several security measures including encryption and access controls, but lacks specific technical details or certifications. General commitment to protection with third-party oversight, but could be more comprehensive.

Clear disclosure that transfers are not routine but may occur, specific countries named (Europe, USA, Ireland, Singapore), detailed circumstances, and commitment to safeguards for overseas disclosures.

Clear access and correction mechanisms with specific forms, detailed complaint process with timeframes (10 days acknowledgment, 45 days response), and external escalation to OAIC. Good anonymous interaction options.

No specific disclosure of automated decision-making practices, AI/ML use, or related rights. Only mentions Privacy Impact Assessments generally without ADM-specific transparency.

No relevant claims found in policy.

No specific findings.