Mastercard says some of its online products and services include advanced fraud prevention technology that uses behavioral-based data or biometric information, giving as examples keystroke timing, device accelerometer, scroll position and mouse location.
some of our online products and services include advanced fraud prevention technology using behavioral-based data or biometric information, such as keystroke timing, device accelerometer, scroll position and mouse-location.
Qualifications & exceptions
Applies to "some" online products and services, not all, and the examples are introduced with "such as".
Not stated here
The notice does not say which products use this technology or how long the data is kept.
Security & Safeguards · Company commitment
Mastercard requires privacy and security protections in third-party agreements
Mastercard says that before transferring or sharing any Personal Information (including access to it) it requires appropriate privacy and information security protections in agreements with third parties. It says it operates a comprehensive Third Party Risk Management Program and performs appropriate due diligence as part of it.
Details
What it does
Require privacy and information security protections in agreements; run a Third Party Risk Management Program with due diligence
Supporting quotations
Prior to the transfer or sharing of any Personal Information (including access to Personal Information), we require appropriate privacy and information security protections in agreements with third parties.
We operate a comprehensive Third Party Risk Management Program and we perform appropriate due diligence as part thereof
Qualifications & exceptions
Stated for transfer or sharing with third parties; the notice does not say what protections are "appropriate".
Security & Safeguards · Company commitment
Mastercard says it keeps reasonable safeguards and uses SSL on some websites
Mastercard says it maintains appropriate security safeguards to protect your Personal Information. It says it maintains reasonable administrative, technical and physical safeguards designed to protect the Personal Information you provide or it collects against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use, and that it uses SSL encryption on a number of its websites from which it transfers certain Personal Information.
Details
What it does
Maintain administrative, technical and physical safeguards; use SSL encryption on a number of websites
Supporting quotations
We maintain appropriate security safeguards to protect your Personal Information
We maintain reasonable administrative, technical and physical safeguards designed to protect the Personal Information you provide or we collect against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use.
We use SSL encryption on a number of our websites from which we transfer certain Personal Information.
Qualifications & exceptions
The safeguards are "reasonable" and "designed to" protect, which is not a guarantee against all loss or access; SSL encryption is stated for "a number of" websites, not all.
Not stated here
The notice does not say which websites use SSL encryption or what other security measures exist.
After a security breach Mastercard says it assesses harm and follows legal reporting duties
Mastercard says that in the event of a breach of its security safeguards it will assess the extent of harm (if any) to individuals and comply with reporting and notification obligations in accordance with the applicable law. The notice does not promise notification beyond what applicable law requires.
Details
What it does
Assess the extent of harm to individuals; comply with reporting and notification obligations
Condition
Breach of security safeguards
Supporting quotations
In the event of a breach of our security safeguards, we will assess the extent of harm (if any) to individuals, and comply with reporting and notification obligations in accordance with the applicable law.
Qualifications & exceptions
Reporting and notification are tied to "the applicable law".
Not stated here
The notice does not give a notification deadline or say which individuals would be told.