Central Research Institute of Electric Power Industry (“CRIEPI”), in accordance with this Privacy Policy (this “Policy), protects and manages personal information collected for its business activities or service provision. Provided, however, that this Policy does not apply to the Individual Numbers and the Specific Personal Information under the Act on the Use of Numbers to Identify a Specific Individual in Administrative Procedures of Japan.

(1) Collection, use and provision of personal information

CRIEPI collects personal information by fair means and uses it within the scope of the purpose of use (i.e., CRIEPI’s business activities, and provision of, confirmation of and billing for its services, and provision of information related thereto). CRIEPI will not share personal information with any specific person or provide it to any third party without approval of the principal of the personal information in advance.

(2) Proper management of personal information

CRIEPI manages personal information by taking security measures to prevent loss, destruction, falsification, leakage, etc., of personal information.

(3) Compliance with laws, regulations, etc., concerning personal information

CRIEPI complies with laws, regulations, etc., concerning the protection of personal information.

(4) Outsourcing of personal information handling

CRIEPI may outsource the handling of personal information in the course of business operations, in which case CRIEPI will provide strict supervision by concluding contracts necessary for ensuring proper handling of personal information.

(5) Disclosure, correction, deletion, etc. of personal information

CRIEPI will respond accordingly to any request from the principal of the personal information to disclose, correct, delete or suspend use (including provision to a third party) of his/her personal information, or to disclose records of provision to a third party. Such requests can be made through Inquiries below.

(6) Maintenance and improvement of the protection of personal information

In order to properly handle personal information, CRIEPI will disseminate relevant rules and regulations to its officers and other employees and educate them, and continuously improve its system for protecting personal information.

CRIEPI protects and manages the Individual Numbers and the Specific Personal Information (together the “Specific Personal Information, etc.”) collected for its business activities or service provision in accordance with this Policy for the Protection of the Specific Personal Information, etc.

(1) Proper handling of the Specific Personal Information, etc.

CRIEPI collects the Specific Personal Information, etc., by fair means and uses them within the scope set forth in the following paragraph. In addition, CRIEPI will also appropriately handle the storage, provision and disposal of the Specific Personal Information, etc., in accordance with the Information Management Rules and the Criteria for the Management of the Specific Personal Information separately specified by CRIEPI.

(2) Purposes of use

CRIEPI handles the Individual Numbers within the scope of the following purposes of use:

• Tax affairs (e.g., those concerning preparation of withholding records and of statutory written statements, and concerning year-end tax adjustments);
• Affairs concerning preparation of declaration of retirement income receipt;
• Affairs concerning health insurance and employee's pension insurance;
• Affairs concerning employment insurance and industrial accident insurance;
• Affairs concerning the housing fund savings and the asset accumulation pension savings;
• Affairs concerning requests for award of defined-benefit corporate pension plans, etc.;
• Affairs concerning defined contribution corporate pension plans;
• Affairs concerning requests for award of the former retirement pension plan, etc.;
• Affairs concerning preparation of payment reports (e.g., those for remuneration/fees and real estate rental fees); and
• Affairs concerning preparation of payment records and of payment application forms for legal heirs.

(3) Matters concerning security control measures

CRIEPI will take necessary and appropriate security control measures for preventing, etc., leakage or loss of, or damage to, the Specific Personal Information, etc., and carry out necessary and appropriate supervision of its officers and other employees to appropriately take security control measures. In addition, the Specific Personal Information, etc., collected by CRIEPI will not be provided to any third party except in cases permitted by laws and regulations (e.g., those where there is a risk of harm to life, body, property or any other rights or interests of the principal of the Specific Personal Information, etc., or a third party).

(4) Compliance with relevant laws, regulations, etc.

CRIEPI will comply with the Act on the Use of Numbers to Identify a Specific Individual in Administrative Procedures and the Act on the Protection of Personal Information of Japan, and all its officers and other employees, understand the importance of the protection of the Specific Personal Information, etc., and appropriately handle them.

(5) Continuous improvement

CRIEPI will continuously improve this Policy and the rules for handling the Specific Personal Information, etc., to appropriately protect the Specific Personal Information, etc.

Inquiries

General Affairs Group, Central Research Institute of Electric Power Industry