Visa says it has safeguards to help protect sensitive personal information
Visa says it has put in place reasonable technical, physical and administrative safeguards to help protect sensitive personal information from unlawful use and unauthorized disclosure. The wording is "help protect", so it describes an effort and not a promise that misuse or disclosure cannot happen. Apart from the two items listed in the statement, the safeguards themselves are not described.
Details
Who
Visa
What it does
has implemented safeguards to help protect
What it covers
sensitive personal information
Why
protect against unlawful use and unauthorized disclosure
Supporting quotations
We have implemented reasonable technical, physical and administrative safeguards to help protect sensitive personal information from unlawful use and unauthorized disclosure.
Qualifications & exceptions
Described as reasonable and as helping to protect, not as a guarantee
Aimed at unlawful use and unauthorized disclosure
Not stated here
The specific technical, physical and administrative safeguards are not described beyond the two listed items
The statement does not say how Visa checks that the safeguards work
All Visa workers are required to follow the safeguards
Visa says every Visa worker must follow its established safeguards, and that those safeguards include the two items listed after this sentence. Because the safeguards "include" the listed items, the statement does not say the list is complete. It does not define "workers" (for example whether contractors are included) or say how compliance is checked or enforced.
Details
Who
All Visa workers
What it does
are required to follow
What it covers
Visa's established safeguards
Supporting quotations
All Visa workers are required to follow these established safeguards, which include the following:
Qualifications & exceptions
Applies to Visa workers; service providers are covered separately in the access and disclosure items
The safeguards "include" the listed items, so the list is not stated to be complete
Not stated here
Whether "workers" includes contractors or temporary staff is not stated
How compliance is checked or enforced is not stated
Access to sensitive personal information is limited to people who need it
Visa says access to sensitive personal information is limited to Visa workers and service providers who need it to perform tasks for Visa. The statement does not say how that need is decided, which service providers have access, or what controls enforce the limit.
Details
Who
Visa workers and service providers
What it does
access is limited to those who have a need
What it covers
sensitive personal information
Why
to perform tasks for Visa
Supporting quotations
Access to sensitive personal information is limited to those workers and service providers who have a need to access the information to perform tasks for Visa.
Qualifications & exceptions
Access is for workers and service providers only
The need must be to perform tasks for Visa
Not stated here
How a need to access is decided is not stated
The service providers and the access controls are not identified