McAfee

Recommended changes

• 1Publish specific data retention periods for each product feature — particularly email content (AI scam detection), WebAdvisor URL history, financial account data, and identity monitoring data — rather than four open-ended criteria with no timeframes.
• 2Name security certifications (SOC 2, ISO 27001) and encryption standards in the main privacy policy, given the extraordinary sensitivity of the data held across the product suite.
• 3Move advertising data sharing to an opt-in model for contact and commercial information, rather than opt-out — particularly for users who subscribe to McAfee specifically for privacy protection.
• 4Disclose the reasons behind the 55% CCPA deletion request denial rate published in the policy metrics, so users can understand when deletion requests succeed and when they are refused.
• 5Provide a self-service privacy dashboard showing all data collected per product feature, with per-feature deletion options, rather than requiring uninstallation for unregistered users.
• 6Publish a transparency report showing government data request volumes and outcomes annually, given the breadth of sensitive data held including email content and financial account credentials.