QUOTE(lifebalance @ Feb 6 2020, 01:36 PM)
Well the fact is that, insurance companies can't simply divulge any detail to anyone who calls in claiming to be somebody, similar to bank accounts where you can simply call and disguise as a family member to check on personal account details. They simply can't do so.
While I understand this is a frustration especially for older folks but at the same time would you like someone in your family to call in to check on your insurance details?
Having the authorization letter does help to get consent from the insured to allow you to act on his/her behalf as the insurance company would not want to be blamed for breach of PDPA. Similar like giving power of attorney to a person to act on his/her behalf.
Cheers.
totally understood
BUT...
1. TAC to policy owner's registered #
OR policy owner's email
OR Insurer's own system for policy owner
VS
2. any woman claiming to be my mum with all her details (from me)
which is safer ar?
process / level 2 or 3 thinking issue leh
3. Also, please be clear PDPA is for protecting an individual (data owner).
The request was to clarify what was further required in the claims since sms was sent to policy's registered mobile #.
There was NO request on individual's data like policy info, name, IC, payout amount, etc. since i have all that. I clearly re-iterated the reason for the call and also offered (1.) as verification.
Please dont drag PDPA into this, i can easily drag Competition Act into this - ie. Insurer is purposely making it hard on customers to claim if not using their "panel hospitals". Kickbacks? "Friendly" parties? i dunno - thus, not even dragging in Competition Act ya.