Westpac

Comprehensive scope coverage with plain language commitment, detailed contact information, definitions glossary, and clear policy availability. Strong introductory summary and current version dating enhance accessibility.

Clear primary purposes with secondary use disclosure and marketing opt-out mechanisms. Analytics and research uses well-documented, though purpose limitation commitment could be more explicit.

Adequate policy update notification and privacy officer contact details with staff training commitments. Missing specific review frequency and change notification mechanisms limit comprehensiveness.

Exceptionally detailed enumeration of data types with specific examples, comprehensive collection methods disclosure, clear sensitive information handling, and strong legal basis documentation. Exceeds minimum requirements with granular specificity.

Clear categorization of recipients with named credit reporting bodies, specific purposes stated, and comprehensive overseas disclosure. Strong contractual obligations disclosure though some Business Partner coverage gaps exist.

Adequate coverage of access controls, employee training, and monitoring practices with industry benchmarking. However, lacks specific technical measures like encryption details or certifications.

Comprehensive country listing with specific purposes and Westpac Group entity locations. Clear international transaction processing disclosure, though adequacy mechanisms could be more specific.

Clear access and correction rights with multiple contact mechanisms and OAIC complaint pathway. Missing explicit deletion rights and specific response timeframes limit the score.

Minimal disclosure with only implied automated processing through data analytics and credit assessment. No explicit ADM disclosure, opt-out rights, or algorithmic transparency provided.

Very limited coverage focusing only on tax withholding thresholds for child accounts. No age verification, parental consent mechanisms, or child-specific protections disclosed.