Personal Information Protection Principles

SB Energy Corp. (hereafter called “SBE”) works for implementation of the following matters to ensure full compliance with “Act on the Protection of Personal Information” (Act No. 57 of May 30, 2003) , “Guidelines Targeting Economic and Industrial Sectors Pertaining to the Act on the Protection of Personal Information” and other governmental guidelines to protect personal information.

1.Strengthened employees' training

Provide all of SBE employees and temporary staffers who handle personal information with training at least once a year as well as create learning materials on personal information protection to distribute to all of SBE employees and temporary staffers.

2.Development of company rules concerning personal information protection

Ensure that SBE tough stance against leakage of personal information is fully communicated in SBE as well as develop company rules concerning personal information protection to present a clear policy for handling of personal information.

3.Placement and enhanced functions of “Information Security Committee”

Build up a structure with visible roles to comply with laws and guidelines, develop relevant company rules, build up an audit structure and oversee the handling of personal information as well as place “Information Security Committee”.

4.Implementation of appropriate measures for information security

Implement necessary and appropriate measures to administer access to personal information, limit taking-out of personal information and prevent unauthorized access from outside with intent to prevent personal information from being leaked, lost or damaged and safely control personal information.

5.Outsourced operations

  • Outsource, in some cases, all or part of its personal information handling operations in sales of various services, response to customers' inquiries, facility maintenance, tariff-related works, marketing tasks and other related works.
  • Fully examine the eligibility of outsourcing agents when concluding outsourcing agreements. Further, set out safety management measures, confidentiality, terms of subcontract and proper handling of personal information in such outsourcing agreements and oversee SBE's outsourcing agents in an appropriate manner by regularly monitoring outsourced operations.
  • Use personal information provided by an outsourcer in association with the acceptance of outsourced operations to the extent necessary for the purpose of the agreement with such outsourcer.

6.Setup/Enhancement of audit structure

Set up an audit structure which enables SBE to internally audit whether personal information is properly protected.

7.Proper collection, use, provision and announcement of personal information

Legally and fairly obtain personal information by means of application forms, web site or verbal explanation upon clarifying the purpose of use of such personal information. Properly use, provide and announce personal information by considering details and a scale of business.

8.Continuous improvement of personal information protection-related activities

Continuously attempt to review/improve the activities stated in paragraph 1 through 7 above.

9.Revision

SBE may revise all or a part of the present “Personal Information Protection Principles”. In the event of a material change, SBE announces it on its official web site in an easily comprehensible manner.

Coverage of “Personal Information Protection Principles”

“Personal information” in “Personal Information Protection Principles” is information regarding a living person that would allow the identification of the person as a particular individual, such as the name, birth date, other descriptions, ID number, other code, image or voice included in the relevant information regardless of SBE's customers, or employees of business partners or SBE (including such information that can easily be collated with other information, thereby enabling the identification of a particular individual). “Personal Information Protection Principles” applies, unless otherwise stated in each paragraph, to all personal information held by SBE.

Supplementary provisions

This Personal Information Protection Principles shall be enforced from December 25, 2014.

Masayoshi Son Director & Chairman
SB Energy Corp.