011 · Intake and acknowledgment
Record the date, channel, contact information, issue, requested resolution, and any accessibility need. Send acknowledgment within two business days when a supported channel is available. Do not request passwords, PINs, authentication codes, or unnecessary identity documents.
022 · Classification and ownership
Classify the matter as service, privacy, accessibility, marketing, fraud or impersonation, legal, or future product. Assign one accountable owner and preserve the original record.
033 · Risk escalation
Escalate immediately when a report suggests imminent harm, fraud, security compromise, discrimination, repeated consumer harm, legal process, media inquiry, or systemic control failure.
044 · Investigation and response
Review relevant records, distinguish fact from inference, identify affected people and controls, document findings, and provide a plain-language response. Founding target: a substantive response within 15 business days, or a status explanation when more time is required.
055 · Remediation and monitoring
Correct confirmed issues, identify root cause, test the remedy, preserve the rationale, and aggregate trends for governance review. This target does not replace any shorter deadline that future law or provider terms may require.