Risk of Stricter Telecommunications, Consumer Protection and Overseas Regulations
First written in FY2016. 4 of 7 entries say "Worsened", first in FY2017. Latest entry: FY2026.
Internet Initiative Japan moved to the "Worse" side of this theme in 2017, 3 years before the typical company in this theme (2020).
The whole theme swung hardest in 2024: 4 of 6 companies on the "Worse" side.
3 other companies' latest entry also says "Worsened".
- FY2026WorsenedAnnual report
「The Economic Security Promotion Act and the Act on the Protection and Utilization of Important Economic Security Information (legislation establishing security clearances) have entered into force, the import and export control system has been revised, and the Act on the Promotion of Strengthening Cybersecurity Response Capabilities has been enacted. Against the backdrop of changes in the international situation and socioeconomic structures, promoting economic measures to ensure national security has become increasingly important.」
In addition to the Telecommunications Business Act and GDPR, the disclosure covers the Act on the Protection and Utilization of Important Economic Security Information, revisions to the import and export control system, and the Act on the Promotion of Strengthening Cybersecurity Response Capabilities, expanding the scope of regulatory and national security compliance. - FY2024WorsenedAnnual report
「With the enactment of the Economic Security Promotion Act and the Economic Security Information Protection Act (legislation establishing security clearances), promoting economic measures to ensure national security has become increasingly important amid changes in the international situation and socioeconomic structures.」
In addition to the previous regulatory risks involving telecommunications and GDPR, compliance requirements relating to the introduction, maintenance and management of equipment under the Economic Security Promotion Act and the Economic Security Information Protection Act have become more specific. - FY2023WorsenedAnnual report
「As the number of lines provided increased, the Company was designated by the Minister for Internal Affairs and Communications in October 2022, pursuant to Article 41 of the Telecommunications Business Act, as a telecommunications carrier required to properly manage telecommunications facilities because of their significant impact on users' interests. This resulted in obligations including maintaining telecommunications facilities in compliance with prescribed technical standards.」
In addition to GDPR and BCR compliance, requirements relating to designation as a telecommunications facility operator subject to proper management and the Economic Security Promotion Act have made regulatory supervision and compliance obligations more specific. - FY2019RestatedAnnual report
「The Company's consolidated subsidiary IIJ Europe Limited has applied to the UK supervisory authority for approval of BCRs (Binding Corporate Rules), which document the Group-wide information management rules, and is taking steps to obtain approval. However, if an inadvertent violation of the rules results in substantial fines, the Group's operating results and financial condition may be affected.」
Even after the GDPR entered into force, the Group continues to disclose its efforts to obtain BCR approval and the risks of violations and fines. - FY2018MaterialisedAnnual report
「In the European Union (EU), the new regulation intended to protect personal information, the GDPR (General Data Protection Regulation), entered into force on 25 May 2018.」
The disclosure moved from the previous stage, when enforcement was scheduled, to the stage after the GDPR actually entered into force on 25 May 2018. - FY2017WorsenedAnnual report
「In the European Union (EU), the new regulation intended to protect personal information, the General Data Protection Regulation (GDPR), will enter into force on 25 May 2018.」
In addition to the previous regulatory risks, the timing of the GDPR's entry into force and the response to the BCR application are described specifically, clarifying the Group's exposure to overseas data protection regulations. - FY2016First statedAnnual report
「In addition, if laws and regulations relating to the Group's business are newly introduced or strengthened, the flexibility and speed of its business operations may be impaired, affecting its operating results and financial condition.」
Examples include amendments to the Telecommunications Business Act, consumer protection requirements, the FCPA and the EU Data Protection Directive.