Leakage and Unauthorized Use of Personal Information
First written in FY2016. 2 of 4 entries say "Mitigated", first in FY2023. Latest entry: FY2026.
The whole theme swung hardest in 2026: 18 of 81 companies on the "Worse" side.
- FY2026MitigatedAnnual report
「Our Group has established a personal information management framework to ensure the proper handling of personal information in accordance with the Act on the Protection of Personal Information and other relevant laws and regulations, and has implemented necessary security measures, including management of purposes of use, management of outsourcers and access rights management.」
The disclosure specifies management measures addressing not only personal information leaks, but also improper collection and use, provision to third parties, cross-border transfers and management of outsourcers. - FY2023MitigatedAnnual report
「In accordance with the Act on the Protection of Personal Information, our Group has established a framework for implementing appropriate safeguards for personal information. In addition, Group companies that handle particularly large amounts of personal information have obtained PrivacyMark certification and handle information appropriately.」
The disclosure specifies safeguards against the risks of personal information leaks and unauthorized use, as well as PrivacyMark certification for companies handling large amounts of information. - FY2018RestatedAnnual report
「Our Group holds a large amount of personal information, including card member information, and implements Group-wide initiatives to ensure its proper management. However, if personal information is leaked or misused, we may receive recommendations, orders or penal sanctions for violations of internal rules under the Act on the Protection of Personal Information.」
The disclosure continues to address the risks of leakage and unauthorized use associated with holding a large amount of personal information, as well as the legal and reputational consequences. - FY2016First statedAnnual report
「Our Group holds a large amount of personal information, including card member information, and implements Group-wide initiatives to ensure its proper management. However, if personal information is leaked or misused, we may receive recommendations, orders or penal sanctions for violations of internal rules under the Act on the Protection of Personal Information.」
The disclosure identifies legal and reputational risks associated with holding a large amount of card member information.