Risk of leakage, loss and misuse of large volumes of personal information
First written in FY2016. 2 of 6 entries say "Mitigated", first in FY2020. Latest entry: FY2026.
The whole theme swung hardest in 2025: 7 of 60 companies on the "Worse" side.
0 other companies' latest entry also says "Raised".
- FY2026RaisedAnnual report
「The need to improve information literacy associated with the rapidly expanding use of generative AI tools and the risk of information leakage resulting from the increasing complexity and expansion of supply chains are also rising.」
In addition to the traditional risks of managing large volumes of information, the company has added risks associated with the use of generative AI and the expansion of supply chains to its personal information risk assessment. - FY2024AdvancedAnnual report
「The Personal Information Protection Committee, chaired by the Representative Director and President (COO), meets once every six months. It submits plans and progress for personal information protection management, including risk-based management of contractors, to management and implements appropriate management and oversight.」
The company has specified its response to personal information leakage risks through semiannual planning and progress management by the Personal Information Protection Committee, including contractor management. - FY2023MitigatedAnnual report
「The risk of information leakage has increased as the environment in which information is handled has changed rapidly, including more frequent opportunities to take information devices outside the company due to changes in sales practices. In response, the Group is working to reduce information security risks by implementing measures including VPN connections, vein authentication, and restrictions on information output, as well as continuing to provide employee training.」
The company recognizes leakage risks arising from changes in the information-handling environment and continues to implement VPN connections, vein authentication, restrictions on information output, and employee training as countermeasures. - FY2021Information leakage risks and countermeasures associated with the expansion of remote workAnnual report
「As the environment in which information is handled has changed rapidly following the spread of COVID-19 and the promotion of remote work, the risk of information leakage has also increased. In response, the Group is working to reduce information security risks by implementing measures to secure mobile devices, including VPN connections, biometric authentication using veins, and restrictions on printing, while continuing to provide employee training.」
The company explicitly identifies the increase in information leakage risk resulting from the expansion of remote work and cites VPN connections, vein authentication, printing restrictions, and training as countermeasures. - FY2020MitigatedAnnual report
「The company and its 4 domestic consolidated subsidiaries have obtained PrivacyMark certification from the Japan Institute for Promotion of Digital Economy and Community, which evaluates the level of personal information protection, and are working to ensure effective controls.」
In response to the risk of large-scale leaks and other incidents involving personal information, the company describes its personal information management framework and PrivacyMark certification for 4 domestic consolidated subsidiaries. - FY2016First statedAnnual report
「Given the nature of its business, the Group obtains, holds, and uses large volumes of personal information, primarily personal credit information, including standalone credit card numbers. If a leak, loss, or unauthorized use of personal information occurs at the Group or its contractors, this could damage the Group's reputation, result in liability for damages, and affect business performance.」
Given the nature of its business, which involves handling large volumes of personal credit information, the company identifies reputational and damages liability risks arising from leaks and other incidents.