Safeguarding your personal data is important to us. We continuously look to strengthen our digital security and keep your information safe.
Security and fraud protection
Managing cyber risk
We believe managing cyber risk is critical to delivering quality healthcare services for all our members.
Bupa maintains a focus on strengthening our defences against cybersecurity breaches and assesses the privacy and security risks involved in initiatives.
We also run a security awareness and training program of all our people.
How Bupa pro-actively protects your information
We’re Proudly ISO 27001 Certified
Your trust matters to us. That’s why we’re proud to have achieved ISO 27001 certification — the internationally recognised standard for information security management.
This certification means Bupa Health Insurance systems, processes, and practices have been independently assessed to ensure we meet rigorous standards for protecting the confidentiality, integrity, and availability of information.
In simple terms, it’s our commitment to help safeguard your data and privacy every step of the way. Whether you’re sharing personal information or relying on us for critical services, you can be confident our information security systems follow international best practices contained in this International Standard.
Account monitoring
Our fraud and cyber security teams monitor accounts and policies to detect and alert potential unusual or suspicious activity. To protect your personal information and financial wellbeing we may contact you to verify any unusual activity.
Data encryption
Our site uses data encryption (Transport Layer Security protocols) to help keep your transactions secure and private. TLS provides a secure link between your browser and our server and encrypts your personal information to ensure it is kept private over the internet.
Threat and incident responses
Our cyber defence centre is on the constant look out for threats. We maintain strong industry partnerships ensuring we have the latest information and capability available to us.
Awareness and support
We believe our members play a key role in protecting their digital accounts and online safety. We provide the latest information in security awareness and encourage our members to regularly verify transactions on their myBupa account and report any suspicious activity.
How Bupa will contact you
When needed, Bupa may contact you regarding payments, refunds, claims, compensation, billing matters, or account verification.
We'll aim to use your preferred contact details, so it's important to keep them up-to-date. You may also receive secure notifications through myBupa, which can be a helpful way to confirm legitimate communication from us.
Please be aware that Bupa will never:
- ask you to provide passwords or myBupa login details
- ask you to share sensitive information through unsecured channels such as email or SMS.
- pressure you into making immediate payments or transferring money urgently.
If you receive an unexpected call or message and feel unsure about its legitimacy, do not feel pressured to continue the interaction.
How do I know this is not a scam?
You can always contact Bupa directly using the phone number on our website, app or membership card. We fully support customers taking steps to verify the communication and want you to feel safe and confident when interacting with us.
I received a suspicious email asking for sensitive information
If you receive an email that appears to be from Bupa but doesn't look or feel quite right, you can report it to security at scams@bupa.com.au or call us on 134 135.