Risk of personal-information leakage
First written in FY2017. 1 of 3 entries say "Mitigated", first in FY2018. Latest entry: FY2021.
The whole theme swung hardest in 2026: 13 of 50 companies on the "Worse" side.
86 other companies' latest entry also says "Restated".
- FY2021RestatedAnnual report
「We have established a personal-data protection and management framework. The personal-data protection managers in each division provide thorough employee training within their divisions, and the Internal Audit Office conducts regular audits. Based on the results, we pursue continuous improvement and work to prevent leaks. However, if personal data were to leak, this could adversely affect our group's financial position and operating results.」
The company reiterates measures to prevent personal-data leaks through a management framework, employee training, regular audits, and continuous improvement, as well as the risk of an impact on operating results if a leak occurs. - FY2018MitigatedAnnual report
「These personal data are managed by our group, while management of some of the data is outsourced to an external service provider. We have established a personal-data protection and management framework. The personal-data protection managers in each division provide thorough employee training within their divisions, and the Internal Audit Office conducts regular audits. Based on the results, we pursue continuous improvement and work to prevent leaks.」
The company provides specific preventive measures against personal-data leaks, including a management framework, employee training, regular internal audits, and continuous improvement. - FY2017First statedAnnual report
「These personal data are managed by consolidated companies, while management of some of the data is outsourced to an external service provider. However, if personal data were to leak, this could adversely affect the financial position and operating results of the consolidated companies.」
The company explicitly identifies for the first time the risk of leaks arising from the internal and external management of personal data, including point-card members' data, and the potential impact on operating results if a leak occurs.