Our Security Control Measures for Your Personal Information
We will always strive to handle personal information in an appropriate manner, under the following security control measures.
1 Basic Policy Formulation
We recognize the importance of the rights and interests of individuals, so in order to handle personal information appropriately, we have established a Kyuden Group's Basic Policy on the Protection of Personal Information, and will ensure that all executive officers and employees of KYUDEN Holdings are thoroughly aware of this policy to provide appropriate protection of personal information.
2 Established Regulations for Handling Personal Data
We have established rules for handling personal data. These regulations include the methods of its acquisition, the responsible parties or persons in charge of it, and their duties at each stage of the acquisition, use, storage, provision, deletion or disposal of personal data.
3 Organizational Security Control Measures
In addition to appointing parties responsible for the handling of personal data, we have clarified which employees handle it and the scope of the information they handle, and have established systems for reporting to the party responsible when actual or suspected violations of the law or handling regulations are detected.
Periodic self-inspections of the status of personal data handling, as well as audits by an internal auditing organization, are also conducted.
4 Human Security Control Measures
Our employees are regularly provided with education and training on points to keep in mind when handling personal data, and confidentiality obligations regarding personal data are also stipulated in the employment regulations.
5 Physical Security Control Measures
In areas handling personal data, we have implemented employee access controls, restricting the equipment and other items they may bring in, while taking measures to prevent unauthorized persons from viewing personal data.
We have also taken measures to prevent the theft or loss of equipment, electronic media, and documents that handle or contain personal data, as well as to ensure that personal data is not easily revealed when the equipment or electronic media that handle personal data are carried, including when they are moved inside the office.
6 Technical Security Control Measures
We have implemented access restrictions in order to limit the scope of personnel in charge and the personal information databases, etc. handled.
We also have a mechanism in place to protect the information systems that handle personal data from unauthorized external access.
