Risk of Customer Personal Information Leakage or Disclosure
First written in FY2016. 2 of 4 entries say "Reframed", first in FY2017. Latest entry: FY2025.
The whole theme swung hardest in 2026: 13 of 71 companies on the "Worse" side.
- FY2025ReframedAnnual report
「We have taken measures including establishing internal rules, educating employees, and strengthening system security to manage this information. However, if information is leaked as a result of unauthorized access, cyberattacks or other incidents, the resulting liability for damages and decline in social credibility could affect our group's financial position, operating results and cash flows.」
The disclosure has become more specific, expanding from the previous risk of leakage or disclosure of customers' personal information to information-security risks including unauthorized access, cyberattacks, liability for damages, employee education and system security. - FY2018RestatedAnnual report
「For the management and handling of this information, our Compliance Committee and Internal Control Committee establish internal rules, and we have put in place a management framework and taken all possible precautions. However, if information is leaked or otherwise disclosed, our group's social credibility could decline, potentially affecting our group's operating results.」
The Company reiterates the management framework covering member-customer information from its own EC operations and other channels, in addition to retail locations, and the risk of impacts on credibility and operating results in the event of leakage or disclosure. - FY2017ReframedAnnual report
「Our group holds a large amount of personal information in managing customers at directly operated stores, department stores and other retail locations, as well as in managing member customers through our own EC operations and other channels. For the management and handling of this information, our Compliance Committee and Internal Control Committee establish internal rules, and we have put in place a management framework and taken all possible precautions.」
The Company explicitly adds member-customer management for its own EC operations and other channels to the scope of personal information, and identifies the Compliance Committee and Internal Control Committee as the responsible bodies. - FY2016First statedAnnual report
「Our group holds a large amount of personal information in managing customers at directly operated stores, department stores and other retail locations. For the management and handling of this information, our CSR Promotion Committee establishes internal rules, and we have put in place a management framework and taken all possible precautions. However, if information is leaked or otherwise disclosed, our group's social credibility could decline, potentially affecting our group's operating results.」
The Company indicates that leakage or disclosure of personal information held at directly operated stores, department stores and other locations could affect its social credibility and operating results, and identifies internal rules and a management framework as countermeasures.