Data Privacy & Cybersecurity: Data Privacy

Protecting our customers’ data and safeguarding customer privacy are essential parts of the Travelers Promise. We evaluate data from many sources, including from our individual or business customers themselves, third-party service providers and public sources. In addition to guiding our risk selection and pricing, this data is leveraged to run sophisticated predictive claim models, which improve claim outcomes for our customers and efficiency for our business.

Key aspects of our data privacy program include the following:

• We endeavor to comply with all applicable privacy regulations, including but not limited to the California Consumer Privacy Act.
• We will not give or sell personal information to non-affiliated third parties for their marketing purposes without permission.
• We maintain safeguards designed to help prevent unauthorized use, access and disclosure of personal information. For example, we limit access to personal information and require those who have access to use it only for legitimate business purposes.

Core privacy principles guide the actions we take when collecting and using personal information, including the following:

• Notice. We give notice to individuals about the purposes for which Travelers collects, processes, stores and discloses personal information.
• Collection and use. Travelers thoughtfully considers information collection practices and strives to limit collection to only information that is relevant and reasonably necessary to accomplish Travelers’ intended purposes. Travelers uses the personal information collected directly from insureds only for purposes consistent with the context of the transaction and/or with consent.
• Access and correction. Personal insurance customers may request access to, and correction of, personal information about them held by Travelers, and Travelers will honor those requests consistent with applicable law.
• Disclosure. Travelers takes steps designed to ensure that personal information is only disclosed to third parties for legitimate business reasons.
• Cross-border transfers of data. Travelers takes steps designed to ensure that any transfer of personal information across country borders is made in accordance with the local laws of the country from which the personal information is being transferred and the country to which the personal information is being transferred.
• Retention and destruction. Travelers maintains policies relating to record management, including record retention schedules and purge and deletion procedures. When personal information is disposed, we employ secure methods, which are designed to make the personal information unreadable and unreconstructable (such as shredding or degaussing).
• Information quality and integrity. Travelers takes reasonable steps designed to ensure that the personal information it uses is accurate, relevant, complete and up to date for the purposes for which it is intended to be used.
• Security. Travelers understands that cybersecurity is essential for protecting personal information and employs appropriate physical, technical and administrative measures to safeguard and secure personal information. In the event the security of certain personal information has been compromised, Travelers has a formal process to manage and mitigate any associated risks and notify individuals when required or appropriate.
• Training and awareness. Travelers provides appropriate training to all individuals with access to personal information.

For additional information regarding how we collect, use, share and protect personal information, see the Privacy & Security section of our corporate website.