Regulatory compliance risk relating to personal information and cross-border data
First written in FY2021. 1 of 3 entries say "Mitigated", first in FY2022. Latest entry: FY2024.
1 other company's latest entry also says "Restated".
- FY2024RestatedAnnual report
「Recently, opportunities to collect personal information have increased due to the rise in web seminars accompanying the global COVID-19 pandemic and our expansion into new fields such as education. We are taking measures including changing our privacy policies to comply with the laws of each country, responding to the CCPA, introducing cookie management tools and providing project support.」
While identifying the risk arising from increased opportunities to collect personal information, we continue to implement measures such as changing country-specific policies, responding to the CCPA and introducing cookie management tools. - FY2022MitigatedAnnual report
「Going forward, we will continue to develop policies for each country, address China's Personal Information Protection Law and cross-border data requirements, and provide internal training.」
Specific measures for addressing personal information and cross-border data regulations include China's Personal Information Protection Law, cross-border data, country-specific policies and internal training. - FY2021First statedAnnual report
「In recent years, countries and regions worldwide have been enacting laws and regulations to protect various types of information, particularly personal information, as represented by the GDPR (General Data Protection Regulation) and the CCPA (California Consumer Privacy Act). This requires the development of rules and the strengthening of information systems to ensure compliance.」
Regulatory risks relating to the management of personal and confidential information, including the GDPR, CCPA, China's Personal Information Protection Law and cross-border data, were newly identified as a separate risk.