Cybersecurity and Data Privacy

MetLife’s customers, employees and business partners around the world provide us with their personal information every day. We recognize that privacy and data protection are significant concerns for both companies and individuals, and we have a longstanding commitment to protect personal information and use it responsibly.

Our policies and procedures are designed to protect the confidentiality and security of personal information and ensure that information is handled appropriately worldwide, which includes key areas such as safeguards and risk management; monitoring; incident response; cybersecurity and e-discovery investigation; and threat intelligence. Our Global Privacy & Information Security Program establishes enterprise-wide principles and global minimum standards, among other things, around the collection and use of personal information in compliance with applicable privacy laws and regulations. An internal committee of Business Information Security Officers with representation from Technology, Law, Internal Audit, HR, Compliance and other lines of business oversee our information technology security policies, emerging risks and compliance requirements. 

Every year, we conduct mandatory cybersecurity and privacy training for all employees to raise awareness about potential threats and to give them clear actionable guidelines to inform their everyday tasks and decision making. 

We have established reporting processes and escalation pathways from our businesses and functions to ensure that potential personal data incidents can be assessed and handled in a timely manner—including reporting to senior management, as needed.

We are also participants in industry cybersecurity groups and events, such as Cybersecurity Awareness Month, a national campaign sponsored by the Department of Homeland Security that was created to raise awareness about cybersecurity and staying safe.¹