Basic policy, etc. regarding the safe management of personal information
Basic policy
- The Loss Adjusting Association of Japan (LAAJ) has determined its Privacy Policy, a basic policy on the safe management of personal information.
Handling regulations, etc. (handling regulations including the following content)
- Rules for storing and managing personal information outside of business hours
- Rules for taking personal information outside of the company
- Rules for managing people coming into and leaving places where personal information is stored
Structure for the safe management of personal information
Structure for safe management by the organization
- Determining people responsible for the safe management of personal information
- Establishing examination and inspection structures regarding the handling of personal information
- Determining response rules and responsible persons for when incidents occur, such as the leakage of personal information
Structure for safe management by people
- Determining roles, responsibilities, etc. on the handling of personal information, such as work regulations
- Concluding personal information non-disclosure agreements with employees
- Conducting education and training for all employees on the safe management of personal information
Structure for safe management related to technology (information systems)
- Controlling access to individual data (jurisdiction management), including IDs and passwords
- Taking measures to guard against malicious programs such as computer viruses
Structure for personal information management by subcontractors
- Establishing handling regulations for outsourcers and supervising subcontractors as necessary and proper
Measures for the end of contracted work
- Carefully returning, storing, and disposing of documents, etc. related to individual data after the end of contracted work