Risk of Leakage of Patient and Business Partner Information
First written in FY2023. 1 of 3 entries say "Restated". Latest entry: FY2026.
The whole theme swung hardest in 2026: 26 of 91 companies on the "Worse" side.
28 other companies' latest entry also says "Mitigated".
- FY2026MitigatedAnnual report
「Together with the Company and its overseas subsidiaries, the Group pays the closest attention to handling patient information from within the EU in accordance with the EU General Data Protection Regulation (GDPR), and has established information protection and management systems to prevent unauthorized access to, alteration, leakage or loss of information.」
For the risk of cross-border transfers of patient information, the Group states that it has established information protection and management systems at the Company and its overseas subsidiaries based on the GDPR, in addition to its personal information protection and information systems management policies. - FY2024RestatedAnnual report
「As the Group expands its overseas operations, cross-border transfers of personal information relating to patients outside Japan are anticipated. In particular, the EU requires all companies using personal information from within the EU to establish information protection systems meeting certain standards, especially when transferring personal information from the EU to overseas locations.」
In addition to the risk of patient information and other personal information being leaked, cross-border transfers associated with overseas expansion and compliance with the GDPR continue to be disclosed. - FY2023First statedAnnual report
「Because the Company handles personal information, including business partner information and patient information such as names, ages and case details, it is subject to the obligations of a business operator handling personal information under the Act on the Protection of Personal Information.」
The business-specific handling of personal information, including patient information, and the risk of reputational damage from unauthorized access, alteration, leakage, loss and other incidents are identified.