Park24's car-sharing service Times Car announced that it will outline its response policy on 23 October regarding personal information leaked through unauthorized access. It will revise its storage policy to delete driver's license images and other information immediately, and delete all existing images by the end of October.
Park24's car-sharing service Times Car announced that it will outline its future response policy on 23 October in connection with the impact of unauthorized access. The background to the announcement includes a review based on the findings of an investigation by an external specialist organization. The focus is on improving the handling of identity verification documents.
Images of driver's licenses and other identity verification documents had previously been stored during the membership period and for 7 years after cancellation. Under the revised policy, they will be deleted immediately after registration verification. All images already held are also scheduled to be deleted by the end of October, regardless of whether users request their deletion.
Unauthorized access was discovered in September, and the leakage of approximately 1.6 million records, including driver's license images, has been confirmed. The total number of leaked records across all account information is approximately 6.6 million. The risks of retaining data have once again been highlighted, making stronger governance of personal data an important issue.
The decision is attracting attention as one example of how companies should respond to the risks associated with retaining personal data. The handling of highly confidential information, such as facial photographs and address-change histories, is expected to lead to growing efforts to reduce the retention of unnecessary information.