Online Information may be used to detect fraud and secure information, systems and facilities
American Express may use Online Information to manage fraud and security risk, including to detect and prevent fraud, criminal activity, or violations of its terms and conditions, and to safeguard the security of your information, its systems and its facilities.
Details
Why
Detect and prevent fraud, criminal activity or terms violations; safeguard information, systems and facilities
Supporting quotations
manage fraud and security risk, including to:
detect and prevent fraud, criminal activity, or violations to our terms and conditions.
safeguard the security of your information, our systems, and our facilities;
Security & Safeguards · Company practice
Personal Information is protected with administrative, technical and physical security measures
American Express says it uses administrative, technical and physical security measures to protect your Personal Information, including computer safeguards and secured files and facilities.
Details
Who
American Express
What it covers
Personal Information
Supporting quotations
We use administrative, technical, and physical security measures to protect your Personal Information. These measures include computer safeguards and secured files and facilities.
Not stated here
The passage does not describe specific safeguards beyond "computer safeguards and secured files and facilities", and does not promise that information cannot be accessed without authorization.
Principles: confidentiality, need-to-know access, reasonable safeguards, and security requirements for processors
The Principles say American Express will keep your personal data confidential and limit access to those who specifically need it to conduct their business activities, except as otherwise permitted by applicable law. It refers to industry standards and uses reasonable administrative, technical and physical security measures to protect personal data from unauthorised access, destruction, use, modification or disclosure. It requires industry standard data security measures from those third parties who are authorized to process personal data on its behalf.
Details
What it does
Keep personal data confidential and limit access; use reasonable security measures; require industry standard measures from authorized processors
Exception
Except as otherwise permitted by applicable law
Supporting quotations
We will keep your personal data confidential and limit access to your personal data to those who specifically need it to conduct their business activities, except as otherwise permitted by applicable law. We refer to industry standards and use reasonable administrative, technical and physical security measures to protect your personal data from unauthorised access, destruction, use, modification or disclosure. We require industry standard data security measures from those third parties who are authorized by us to process your personal data on our behalf.
Qualifications & exceptions
The confidentiality and access limit is subject to "except as otherwise permitted by applicable law".
The security measures are described as "reasonable", and as referring to industry standards.
Not stated here
The Principles do not name the industry standards or the security measures required of third parties.