Adopted: April 1, 2005
Revised: July 24, 2015
Revised: November 2, 2015
Revised: May 30, 2017
Revised: April 1, 2022
JASDEC DVP Clearing Corporation ("JDCC") fully recognizes the importance of personal information protection, and given JDCC's high public profile as a pillar of the securities settlement infrastructure has established a personal information protection policy to ensure high levels of public welfare and reliability. The Personal Information Protection Policy is as follows:
(1) Use of personal information (except for Individual Number) JDCC shall handle personal information (except for Individual Number) only to the extent necessary to achieve the purpose of use. (2) Use of Individual Number JDCC shall handle Individual Number only to the extent specified in laws and necessary to achieve the purpose of use.
(1) Provision of personal information (except for specific personal information) to a third party
JDCC shall neither provide nor divulge personal information (except for specific personal information) to any third party if not approved by the person identified by the information unless otherwise specified in laws. When personal information is provided to a third party based on the approval of the person, JDCC shall deal with it in conformity with laws.
(2) Provision of Individual Number and specific personal information to a third party
JDCC shall neither provide nor divulge Individual Number and specific personal information to any third party regardless of approval from the person identified by the information unless otherwise specified in laws.
(3) Provision of personally referable information to a third party
JDCC shall neither provide nor disclose personally referable information by which the person can be identified in the location where such information is provided to any third party without the consent of the person identified by the information unless otherwise specified in laws. When personally referable information is provided to a third party based on the approval of the person, JDCC shall deal with it in conformity with laws.
(1) Joint use of personal information (except for specific personal information)
JDCC may use personal information (except for specific personal information) jointly with a third party only to the extent necessary to achieve the purpose of use. In the event of joint use, JDCC shall conform to laws.
(2) Joint use of Individual Number and specific personal information
JDCC shall never use Individual Number and specific personal information jointly with a third party.
Adopted: April 1, 2005
Revised: July 24, 2015
Revised: November 2, 2015
Revised: May 30, 2017
Revised: February 5, 2019
Revised: April 1, 2022
In this section, based on the "Policy on Personal Information Protection" established by JASDEC DVP Clearing Corporation ("JDCC"), JDCC explains the details and the purpose of use of personal information to be acquired by JDCC and the procedure for inquiries about personal information handled by JDCC.
(1) Personal information (except for the following (2) and (3))
a. For administrative work on qualification of management systems of DVP Participant or qualified applicants (hereinafter called "DVP Participants, etc.")
b. For business communication with DVP Participants, etc. such as Settlement Banks, Commitment Line Banks, and other organizations related to the DVP for Non-Exchange Transaction Deliveries System>
(2) Individual Number and personal information containing the Individual Number (except for the following (3))
a. For the preparation and submission of payment record of compensation, etc.(3) Online Identifier
a. For security purposes on JDCC Website.(1) Formulation of the basic policy
a. Formulating the basic policy about compliance with related laws, guidelines, etc., and contact point for inquiries and complaint processing, etc. for ensuring the proper handling of personal data.
(2) Establishment of discipline about handling of personal data
a. Establishing the handling rules of personal data including the handling method, the responsible party in charge, and their duty, etc. at each stage of acquisition, use, retention, provision, deletion and disposal, etc.
(3) Institutional security control measures
a. Appointing a person responsible for handling of personal data, clarifying employees handling personal data and the range of personal data handled by such employees, and developing a system for reporting to and communicating with a person responsible in case the fact or the sign is found that the laws or handling rules are violated.
b. Recording of the handling of personal data
c. Implementing regular self-inspections and internal and external audits of the handling status of personal data
(4) Human security control measures
a. Implementing regular training for the employees about consideration when personal data is handled.
b. Describing the matters about confidentiality of personal data in rules of employment
(5) Physical security control measures
a. Deleting or disposing of personal data in irretrievable ways
(6) Technological security control measures
a. Limiting persons handling personal data and the range of handling personal information database etc. handled by such persons through implementing access control
In Charge of Personal Information:
Copyright(c) 2002 Japan Securities Depository Center inc. All rights reserved.