You trust us with more than just your health. Find out more how Bupa aims to support your digital wellbeing and get the latest information on privacy, security and fraud protection.
Privacy and Security Trust Centre
Your privacy is important to us
Privacy
Your privacy is important to us. We handle your personal information in line with our Information Handling Policy.
Security and fraud protection
We strive to protect your online identity and any information you share with us.
Personal Security and Digital Wellbeing
Learn how you can protect your digital wellbeing - including the security of your personal data, supporting your cyber safety awareness, as well as your mental wellbeing.
Digital security
We seek to continuously strengthen our digital security, helping keep your information safe.
Bupa Phone and Cyber Insurance
Protect your phone and personal online identity with mobile phone and cyber insurance from Bupa. Cover for damage, theft, loss and online identity fraud.
Report a vulnerability
At Bupa, protecting the security and privacy of our customers, patients, people and systems is a priority.
We welcome reports from security researchers who identify potential vulnerabilities in Bupa websites, applications or digital services. Your reports help us strengthen our security posture and continue to protect the people who trust us with their information.
To ensure reports are reviewed and managed appropriately, all vulnerability submissions must be made through Bupa’s Vulnerability Disclosure Program hosted by Bugcrowd.
To Submit a report via Bugcrowd and to see the terms of the Bupa Vulnerability Disclosure Program visit: Bupa Australia Vulnerability Disclosure Engagement - Bugcrowd
Our Commitment
Bupa will review valid reports submitted through Bugcrowd and work to resolve confirmed vulnerabilities based on severity, impact and business risk.
Unless stated otherwise on the Bugcrowd program page, this program does not offer monetary rewards.
Responsible Disclosure Expectations
When testing and reporting vulnerabilities, please:
- Always work within the scope and rules of the Vulnerability Disclosure Program
- Submit all findings through the official Bugcrowd program.
- Avoid actions that may disrupt Bupa systems, services or users.
- Provide sufficient detail to allow us to understand and reproduce the issue.
- Always keep vulnerability details confidential including after Bupa has reviewed and addressed the matter.
Bupa reserves the right to take appropriate action where testing is conducted outside the authorised scope, did not follow the program rules or any malicious or illegal behaviour involved.