The Lawson Group recognizes that the protection of personal information is one of our responsibilities to society. Based on this recognition, the Group has formulated and implemented its personal information protection policy as follows:
We will formulate written rules on the management of personal information, which includes clear stipulation on how we should acquire, use, provide, and entrust the management of personal information. Under the rules, we will manage personal information in an appropriate manner.
The Lawson Group will obtain personal information only to the extent that is necessary to meet the purpose that has been clearly presented or notified to the relevant person or that has been publicly announced.
We will not disclose or provide personal information to any third parties except our suppliers without obtaining the prior consent of the relevant individual, unless laws and regulations require otherwise. If we provide personal information to a supplier, we will enter into a confidentiality agreement with the supplier in which the supplier is obliged to protect the personal information concerned. We will also monitor the supplier to ensure that it handles the personal information appropriately.
We will take reasonable security measures to protect personal information from the risk of unauthorized access, loss, destruction, tampering, leakage and theft, and others.
We will comply with the Act on the Protection of Personal Information and other laws, regulations, and rules pertaining to personal information, and act in line with our internal regulations. We will also conduct related education and awareness-raising activities for our directors, officers and employees.
We will formulate, implement, and maintain the Private Policy Compliance Program, and work continuously to improve it.
We have developed this policy in accordance with laws and regulations in Japan.
September 1, 2010