Risk of loss or leakage of personal and confidential information
First written in FY2016. 2 of 8 entries say "Restated". Latest entry: FY2026.
The whole theme swung hardest in 2026: 9 of 37 companies on the "Worse" side.
3 other companies' latest entry also says "Advanced".
- FY2026AdvancedAnnual report
「The expanded use of generative AI and other technologies may create new information management risks, such as the inappropriate input of confidential information and insufficient consideration of intellectual property rights. The company is working to manage these risks appropriately through usage rules, the development of an appropriate environment, and training.」
In addition to the existing risks of information loss and leakage, the company recognizes the input of confidential information and insufficient consideration of intellectual property rights associated with the use of generative AI as new information management risks, and describes its response through usage rules, environmental measures, and training. - FY2023AdvancedAnnual report
「The company has established and operates a framework of business standards and regulations for ensuring information security, and conducts regular employee training on information security measures. It has established a Security Committee to review and assess information security measures across internal systems and networks, as well as to collect and assess information on the security measures of affiliated companies.」
The company operates information security regulations, regular training, and assessments by the Security Committee of internal systems and networks and affiliated companies. - FY2022MitigatedAnnual report
「The company has obtained PCI DSS certification following an assessment by a certification body and operates its business in compliance with the applicable standards. It has also obtained PrivacyMark certification for the personal and confidential information it handles in the course of its operations and manages and operates such information appropriately.」
In addition to operating in accordance with PCI DSS certification, the company obtained its 11th PrivacyMark certification for personal information protection. It continues to maintain and strengthen its information leakage risk management framework. - FY2021MitigatedAnnual report
「The company has established and operates a framework of business standards and regulations for ensuring information security, and conducts regular employee training on information security measures. It has established a Security Committee to review and assess information security measures across internal systems and networks, as well as to collect and assess information on the security measures of affiliated companies.」
To address the risk of personal and confidential information leakage, the company operates regulations, regular training, and internal and external security assessments by the Security Committee. - FY2019RestatedAnnual report
「The company has obtained PrivacyMark certification for the personal and confidential information it handles in the course of its operations and manages and operates such information appropriately in individual engagements. However, if such information is lost or leaked, the company's performance may be affected by claims for damages from customers and loss of trust. Similarly, if an external cyberattack or other event results in an information leak, the company's business and performance may be affected by claims for damages from customers and loss of trust.」
The company continues to bear the risks of losing or leaking personal and confidential information, leakage caused by external cyberattacks, and associated claims for damages and loss of trust. - FY2018RestatedAnnual report
「The company has obtained PrivacyMark certification for the personal and confidential information it handles in the course of its operations and manages and operates such information appropriately in individual engagements. However, if such information is lost or leaked, the company's performance may be affected by claims for damages from customers and loss of trust. Similarly, if an external cyberattack or other event results in an information leak, the company's business and performance may be affected by claims for damages from customers and loss of trust.」
The company continues to identify the risks of losing or leaking personal and confidential information, including leakage caused by external cyberattacks, and describes its response through PrivacyMark certification and appropriate management. - FY2017WorsenedAnnual report
「Similarly, if an external cyberattack or other event results in an information leak, the company's business and performance may be affected by claims for damages from customers and loss of trust.」
In addition to the existing risks of loss and leakage, the company has identified information leakage caused by external cyberattacks as an explicit risk factor. - FY2016First statedAnnual report
「If such information is lost or leaked, the performance of the Group may be affected by claims for damages from customers and loss of trust.」
The company identifies PrivacyMark certification and the management and operation of individual businesses as countermeasures.