Back to top

Protecting Personal Data

People with Purpose

Safeguard everyone's personally identifiable information and protect it from unauthorized or accidental access, use, disclosure or misuse.

With a presence in four distinct insurance segments and operations around the world, we are entrusted with the personal data of millions of individuals. We take our obligation to protect that data very seriously. Not keeping this information secure could impact the lives and futures of real people. We respect the privacy of all individuals and take the necessary and legally required precautions to protect personal data and prevent the harm caused by unauthorized access.

men looking at laptop on table

Purpose in Practice

Protecting personal data means we:

  • Comply with all company policies and applicable privacy laws regarding information protection, as well as the collection, storage, sharing and destruction of personally identifiable information
  • Request and retain only as much personal information as necessary and share it only on a need-to-know basis for legitimate business reasons as permitted by law, even with colleagues
  • Never leave personal information where it can be easily accessed
  • Are transparent about the information we collect, use and share, as well as what we use it for and how we share it
  • Invest in and use robust information protection controls, systems and security procedures
  • Contact our Compliance or Privacy team immediately through the Speak Up Process if we know of or suspect a possible breach

For more information, see Resources.

Good Example

Personally identifiable information (PII) is information that identifies or can be used to identify a person. PII can be information about customers, employees, agents or claimants. It can include, but is not limited to, a Social Security or tax ID number, driver's license number, bank account number, credit card number, date of birth or other information someone might not want to share publicly.


in action

leadership in action

Another claim representative in my office has been out with an illness. One of her customers called and asked for her address in order to send flowers. Can I give out her address?

We want to build strong relationships with customers, but it's not appropriate to give out the representative's personal address or information about a facility where she may be getting treatment. The customer could send something to your office, and leadership would ensure it gets to her.

ECC Monitor: OK