
SOFTBANK MOBILE Corp. (“SBM”) works for implementation of the following matters to ensure full compliance with guidelines concerning Personal Information protection set out by the regulatory authorities such as “Personal Information Protection Act” (30 May 2003 Law No. 57) or “Guideline Concerning Protection of Personal Information in Telecommunications Business” and “Personal information protection management systems ? Requirements” (JISQ15001) as well as to protect Personal Information.
Provide all of SBM employees and temporary staffers who handle Personal Information with training at least once a year as well as create learning materials on Personal Information Protection to distribute to all of SBM employees and temporary staffers.
Ensure that SBM tough stance against leakage of Personal Information is fully communicated in SBM as well as develop Company Rules concerning Personal Information protection to present a clear policy for handling of Personal Information.
Build up a structure with visible roles to comply with laws and guidelines, develop relevant Company Rules, build up an audit structure and oversee the handling of Personal Information as well as place “Chief Privacy Officer” to appoint Information Security Manager as such Officer.
Implement necessary and appropriate measures to administer access to Personal Information, limit taking-out of Personal Information and prevent unauthorized access from outside with intent to prevent Personal Information from being leaked, lost or damaged and safely control Personal Information.
Review/improve outsourced operations in view of the more reinforced protection of Personal Information. Fully examine the eligibility of outsourcing agents when concluding outsourcing agreements. Further, set out safety management measures, confidentiality, terms of subcontract and proper handling of Personal Information in such outsourcing agreements and oversee SBM's outsourcing agents in an appropriate manner by regularly monitoring outsourced operations, which ensures that Personal Information is further protected in those outsourced operations.
In addition, SBM complies with Article 4 of the Telecommunication Business Law concerning the secrecy of communication when providing third parties including outsourcing agents with telecommunication subscribers' information for those outsourced operations.
Set up an audit structure which enables SBM to internally audit whether Personal Information is properly protected.
Further, study the implementation procedures for an access log-based audit because it is considered to be effective to detect a person who leaks Personal Information as early as possible and to prevent possible leaks from occurring with such restraining effects.
Properly collect, use, provide and announce Personal Information by considering details and a scale of business.
Continuously attempt to review/improve the activities stated in Paragraph 1 through 7 above.
SBM may revise all or a part of the present “Personal Information Protection Principles”. In the event of a material change, SBM announces it on its official web site in an easily comprehensible manner.
“Personal Information” in “Personal Information Protection Principles” is information regarding a living person that would allow the identification of the person as a particular individual, such as the name, birth date, other descriptions, ID number, other code, image or voice included in the relevant information regardless of SBM's customers, or employees of business partners or SBM (including such information that can easily be collated with other information, thereby enabling the identification of a particular individual). “Personal Information Protection Principles” applies, unless otherwise stated in each Paragraph, to all Personal Information held by SBM.
Masayoshi Son