Security Measures

1 Development of Personal Information Protection Policy

To ensure the proper handling of personal data, we have established a personal information protection policy covering matters such as compliance with applicable laws and regulations, proper use of personal information, security management of personal information, and the establishment of a contact point for inquiries regarding personal information.

2 Establishment of Rules for Handling Personal Data

For each stage of acquisition and input, use and processing, storage and retention, transfer and transmission, and deletion and disposal, we have established information management rules that define the roles and responsibilities of handlers, restrictions on handlers, and procedures required for the security management of personal data at each management stage.

3 Organizational Security Management Measures

  • We appoint a personal data management officer with overall responsibility for business execution related to the security management of personal data, as well as personal data managers in each department that handles personal data. We also clarify the employees who handle personal data and the scope of information handled, and maintain a structure for reporting the status of personal data handling to the personal data management officer.
  • We periodically conduct self-inspections of the status of personal data handling and carry out internal audits.

4 Human Security Management Measures

  • We provide regular training to all employees on matters related to the handling of personal data.
  • We maintain work rules that provide for disciplinary action in the event of violations of applicable laws and regulations.

5 Physical Security Management Measures

  • We implement measures to prevent viewing of personal data by persons without authority.
  • We implement measures to prevent theft, loss, and similar incidents involving devices, electronic media, documents, and other materials that handle personal data.

6 Technical Security Management Measures

  • We implement access controls and limit the personnel in charge and the scope of personal information databases and similar systems handled.
  • For information systems that handle personal data, we implement measures to protect them from unauthorized external access and malicious software.

7 Understanding the External Environment

When handling personal data in a foreign country, we understand the personal information protection systems and related matters of that country, and handle personal data after taking necessary and appropriate measures for its security management.

8 Supervision of Contractors

  • We establish outsourcing management rules as criteria for selecting contractors, and select contractors in accordance with those criteria.
  • We periodically or as needed confirm contractors' compliance with security management measures and other matters under outsourcing agreements. If the contractual terms relating to outsourcing are not being observed, we supervise the contractor so that the contractor complies with those terms.