-
3. Security Measures
-
(1) Policy Formulation
-
We have established a Privacy Policy that includes compliance with applicable laws, security measures, and designated contact points.
-
(2) Internal Rules for Handling Personal Information
-
Internal rules define how personal information is obtained, used, stored, shared, deleted, and the responsibilities of those handling it.
-
(3) Organizational Security Controls
-
We assign a Personal Information Protection Manager and establish internal reporting structures for any actual or suspected violations. Periodic internal audits are conducted to ensure compliance.
-
(4) Personnel Security Controls
-
Ongoing training is provided to ensure all employees understand the importance of and how to appropriately handle personal information.
-
(5) Physical Security Controls
-
We restrict unauthorized access to areas handling personal information and take steps to prevent theft or loss of devices and media containing such data.
-
(6) Technical Security Controls
-
We manage system access rights to limit access to only authorized personnel.
-
(7) Understanding External Environments
-
When handling personal information in foreign countries, we assess the local data protection laws and take necessary measures to ensure adequate security.