Basic Policy on the Proper Handling of Specific Personal Information, etc.

January 1, 2016

Basic Policy on the Proper Handling of Specific Personal Information, etc.

ASKA Pharmaceutical Holdings Co., Ltd.
Takashi Yamaguchi, President, Representative Director

As a company engaged in the business of manufacturing and selling pharmaceutical products, ASKA Pharmaceutical Holdings Co., Ltd. (hereinafter referred to as “the Company”) recognizes that the secure management of individual numbers and specific personal information (hereinafter collectively referred to as “Specific Personal Information, etc.”) is an important social responsibility. As such, the Company has established a Basic Policy on the Proper Handling of Specific Personal Information, etc., as outlined below, that both executive officers and employees shall adhere to in order to ensure the proper handling of Specific Personal Information, etc.

1. Compliance with laws and regulations

The Company complies with applicable standards such as the Act on the Use of Numbers to Identify a Specific Individual in Administrative Procedures (Act No. 27 of 2013; hereinafter referred to as “My Number Act”) and the Guidelines for the Proper Handling of Specific Personal Information (for Businesses) (hereinafter referred to as “the Guidelines”). Based on these laws, regulations and guidelines, the Company shall establish an internal management system for the proper handling of Specific Personal Information, etc., that it shall implement, maintain and seek to continuously improve.

2.Secure management of Specific Personal Information, etc.

1. The Company shall specify the officer responsible for handling Specific Personal information, etc., limit the number of employees in charge of handling such information to the minimum necessary, and conduct necessary and appropriate supervision for the secure management of Specific Personal Information, etc. In addition, the Company shall take the necessary organizational, human, physical and technical measures to ensure the secure management of files containing Specific Personal information, etc. as well as measures to prevent access to such information by anyone other than the employees in charge of who are required to achieve the purpose of use. The Company shall also prevent leaks, loss and damage to Specific Personal Information, etc.
2. When outsourcing the handling of Specific Personal Information, etc., the Company shall select a subcontractor with Privacy Mark certification or a subcontractor whose standards for protecting personal information are recognized as being at equivalent thereto. Further, when outsourcing handling, the Company shall specify matters regarding the handling of Specific Personal Information, etc. in an agreement and conduct necessary and proper supervision for the secure management of Specific Personal Information, etc.

3.Complaints regarding the handling of Specific Personal Information, etc.

If a complaint regarding the handling of Specific Personal Information, etc. or a request for suspension of provision of such information to a third party is received, the Company shall respond appropriately and swiftly pursuant to the My Number Act and the Guidelines.