Personal Information Protection Principles

SOFTBANK MOBILE Corp. (“SBM”) works for implementation of the following matters to ensure full compliance with guidelines concerning Personal Information protection set out by the regulatory authorities such as “Personal Information Protection Act” (30 May 2003 Law No. 57) or “Guideline Concerning Protection of Personal Information in Telecommunications Business” and “Personal information protection management systems ? Requirements” (JISQ15001) as well as to protect Personal Information.

1. Strengthened employees' training

Provide all of SBM employees and temporary staffers who handle Personal Information with training at least once a year as well as create learning materials on Personal Information Protection to distribute to all of SBM employees and temporary staffers.

2. Development of Company Rules concerning Personal Information protection

Ensure that SBM tough stance against leakage of Personal Information is fully communicated in SBM as well as develop Company Rules concerning Personal Information protection to present a clear policy for handling of Personal Information.

3. Placement and enhanced functions of “Chief Privacy Officer”

Build up a structure with visible roles to comply with laws and guidelines, develop relevant Company Rules, build up an audit structure and oversee the handling of Personal Information as well as place “Chief Privacy Officer” to appoint Information Security Manager as such Officer.

4. Implementation of appropriate measures for information security

Implement necessary and appropriate measures to administer access to Personal Information, limit taking-out of Personal Information and prevent unauthorized access from outside with intent to prevent Personal Information from being leaked, lost or damaged and safely control Personal Information.

5. Outsourced operations

(1)Outsource, in some cases, all or part of its Personal Information handling operations in sales of various services, response to customers’ inquiries, facility maintenance, tariff-related works, marketing tasks and other related works.
(2)Fully examine the eligibility of outsourcing agents when concluding outsourcing agreements. Further, set out safety management measures, confidentiality, terms of subcontract and proper handling of Personal Information in such outsourcing agreements and oversee SBM’s outsourcing agents in an appropriate manner by regularly monitoring outsourced operations.
In addition, SBM complies with Article 4 of the Telecommunication Business Law concerning the secrecy of communication and other relevant regulations when providing third parties including outsourcing agents with telecommunication subscribers’ information for those outsourced operations.
(3)Use Personal Information provided by an outsourcer in association with the acceptance of outsourced operations to the extent necessary for the purpose of the agreement with such outsourcer.

6. Setup/Enhancement of audit structure

Set up an audit structure which enables SBM to internally audit whether Personal Information is properly protected.
Further, study the implementation procedures for an access log-based audit because it is considered to be effective to detect a person who leaks Personal Information as early as possible and to prevent possible leaks from occurring with such restraining effects.

7. Proper collection, use, provision and announcement of Personal Information

Legally and fairly obtain Personal Information by means of application forms, web site or verbal explanation upon clarifying the purpose of use of such Personal Information. Properly use, provide and announce Personal Information by considering details and a scale of business.

8. Continuous improvement of Personal Information protection-related activities

Continuously attempt to review/improve the activities stated in Paragraph 1 through 7 above.

9. Revision

SBM may revise all or a part of the present “Personal Information Protection Principles”. In the event of a material change, SBM announces it on its official web site in an easily comprehensible manner.

Coverage of “Personal Information Protection Principles”

“Personal Information” in “Personal Information Protection Principles” is information regarding a living person that would allow the identification of the person as a particular individual, such as the name, birth date, other descriptions, ID number, other code, image or voice included in the relevant information regardless of SBM's customers, or employees of business partners or SBM (including such information that can easily be collated with other information, thereby enabling the identification of a particular individual). “Personal Information Protection Principles” applies, unless otherwise stated in each Paragraph, to all Personal Information held by SBM.

Masayoshi Son
Chairman & CEO
SOFTBANK MOBILE Corp.

This Personal Information Protection Principles shall be enforced from April 1, 2005.
Revised on October 1, 2006
Revised on December 25, 2006
Revised on June 25, 2007
Revised on April 1, 2008
Revised on April 1, 2010