This report, prepared for the CIS8008 course, provides a comprehensive analysis of the Commonwealth Bank of Australia (CBA), focusing on its data security and privacy policies. The report begins with an overview of CBA, its operations, and its significance in the Australian financial sector. It then delves into CBA's security and privacy statements, scrutinizing them against the Data Governance Australia Code of Practice's nine core principles. The analysis includes an assessment of CBA's adherence to these principles, such as no-harm rule, honesty and transparency, fairness, choice, accuracy and access, safety, security and de-identification, accountability, stewardship, and enforcement. Furthermore, the report conducts an Exploratory Data Analysis (EDA) using RapidMiner on diabetes data, identifying key variables like blood pressure, BMI, age, insulin levels, and glucose levels, to predict the likelihood of diabetes. The report also includes visual representations like summary statistics and scatter plots to support the analysis. The report concludes with references and appendices containing decision tree and Weka logistic performance data.