Personal Information Breaches and Changes in Personal Information Regulations
First written in FY2024. 1 of 3 entries say "Worsened", first in FY2025. Latest entry: FY2026.
The whole theme swung hardest in 2021: 2 of 17 companies on the "Worse" side.
27 other companies' latest entry also says "Restated".
- FY2026RestatedAnnual report
「In the HR Business, our group obtains personal information such as job histories and application details from job seekers. In the Public-Private Co-creation Business, we obtain information such as the affiliations and contact details of public servants. We are therefore subject to the obligations imposed on businesses handling personal information under the Act on the Protection of Personal Information.」
Continues to disclose risks concerning the protection of personal information handled in the HR and Public-Private Co-creation Businesses and the enactment, amendment or changed interpretation of regulations. - FY2025WorsenedAnnual report
「In the HR Business, our group obtains personal information such as job histories and application details from job seekers. In the Public-Private Co-creation Business, we obtain information such as the affiliations and contact details of public servants. We are therefore subject to the obligations imposed on businesses handling personal information under the Act on the Protection of Personal Information.」
With the launch of the HR Business, job histories and application details of job seekers were added to the scope of personal-information risk. Risks from the enactment, amendment or changed interpretation of regulations are also explicitly disclosed, with impact rated high. - FY2024First statedAnnual report
「If personal information is leaked due to unauthorized external access or the intentional or negligent conduct of personnel affiliated with our group, claims for damages against our group and a decline in credibility may affect our group’s results and financial condition.」
Countermeasures include stating purposes of use, access controls, access logs, internal training and personal-information management rules.