Risk of Customer Personal Information Leaks
First written in FY2016. 1 of 3 entries say "Restated". Latest entry: FY2021.
The whole theme swung hardest in 2025: 6 of 24 companies on the "Worse" side.
5 other companies' latest entry also says "Mitigated".
- FY2021MitigatedAnnual report
「As part of our Group’s initiatives concerning personal information, we obtained ISMS (*) certification in 2018, work to encrypt data, implement strict access controls and undergo regular system assessments by external organizations, and have established information management rules and manuals. We also provide thorough training for program developers and internal training for all employees.」
Specifically describes measures to address the risk of personal information leaks, including obtaining ISMS certification in 2018, encryption, access management, external assessments and training. - FY2018RestatedAnnual report
「Because our Group receives customers’ names, addresses and other information when selling products through e-commerce and other channels and therefore holds substantial amounts of personal information, it qualifies as a business operator handling personal information as defined under the Act on the Protection of Personal Information, which came into effect in April 2005 and was amended in May 2017.」
Reconfirms the risks associated with the Group’s possession and management of personal information, including those arising from amendments to the Act on the Protection of Personal Information. - FY2016First statedAnnual report
「If personal information belonging to our customers or other individuals is leaked outside the Company, this could affect our business and results of operations through claims for damages, loss of public trust and other consequences.」
Describes data encryption, access controls, system assessments by external organizations, training and PrivacyMark certification.