Personal Information Management

The NGK Group properly and carefully handles personal information obtained and used in the course of its business activities, including specific personal information and individual numbers. It does so in accordance with the NGK Group Corporate Business Principles and Code of Conduct, while taking into account applicable laws and regulations in Japan and overseas as well as social expectations. Based on its Personal Data Protection Basic Policy, we ensure transparency and accountability in each process for collecting, using, managing, and providing personal information, and continuously improve our management framework.
We have also established a framework to appropriately address the transfer of personal data in line with the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
In addition, in accordance with the Act on the Use of Numbers to Identify a Specific Individual in Administrative Procedures (the My Number Act), the Group has established the Basic Policy on the Proper Handling of Specific Personal Information and Individual Numbers and is committed to the proper handling of specific personal information and individual numbers.

The NGK Group has clarified responsibilities and authority for personal information protection and established an effective management framework under management-level oversight.
The roles of the Personal Information Management Supervisor, the Supervisor for Specific Personal Information and Individual Numbers, and the Chief Personal Data Protection Officer (CDPO) are assumed by a person designated by the Board of Directors from among the directors in charge of the General Affairs Department or the executive officer responsible for the General Affairs Department. This person oversees the development and companywide implementation of policies and regulations for personal information protection.
The General Affairs Department leads personal information protection across the Group and works in coordination with each department and Group company. The status of personal information protection is reported to the Compliance Committee at least once a year. The Chair of the Compliance Committee reports matters deemed important to the Board of Directors at least once a year.
During normal operations, each Group company manages its own personal information. In the event of a major incident or other emergency, the head office and Group companies work together to respond.

The NGK Group continuously monitors risks related to personal information as one of its key management indicators. Under the oversight of the Personal Information Management Supervisor and the Chief Personal Data Protection Officer (CDPO), the Persons Responsible for Personal Information Management assigned to each department and Group company in and outside Japan check the status of personal information management in their respective organizations. Under this management framework, in FY2025 as well, each department and Group company in and outside Japan continued day-to-day management, periodic reviews of management status, and education and awareness activities. Through these efforts, we work to reduce risks related to personal information and to maintain and improve management standards. We have also established incident response procedures and a framework for coordination among relevant departments. When an incident occurs, it promptly analyzes the cause and considers measures to prevent recurrence. Through these efforts, we continue to work to prevent such risks from materializing and to prevent recurrence.