Efforts for Protection of Personal Information

The Daigas Group believes that information is an important asset for a company and should be properly managed to prevent leakage or loss, and it has established a system for the proper use and management of personal information received from customers. Furthermore, we are working to enhance risk management regarding personal information by utilizing our risk self-assessment system, G-RIMS, and to raise employee awareness through e-learning and training programs.

In accordance with the Act on the Protection of Personal Information, our Rules for Personal Information Protection, and other related regulations, Osaka Gas has established a privacy policy regarding the handling of information on its customers, shareholders and other parties and posted it on its official website. Based on this policy, we strive to properly protect information on our customers, shareholders, and other parties. In addition, we handle personal information on our employees, etc. in the same manner as customer information. We are making the privacy policy regarding personal information of our employees, etc. known through the internal portal site and striving to properly protect the personal information on our employees, etc.

The Daigas Group, which handles a large amount of personal information, has established rules and implemented various security control measures to protect such information. We are striving to properly manage and prevent leakage of personal information by establishing a personal information protection system that includes subcontractors in its scope, in which the Vice President responsible for the General Affairs Department serves as the Chief Privacy Officer (CPO) and managers are assigned to the Business Units, the Human Resources Department and affiliated companies.

Every year, the Daigas Group strengthens risk management regarding personal information by utilizing its risk self-assessment system, G-RIMS, and addresses personal information protection as an important theme in compliance training and other educational programs to raise employee awareness. Furthermore, all employees and temporary employees who have access to computers provided by the Group are required to take e-learning courses on information security, which consists of basics and case studies. In FY2022, we conducted e-learning programs to teach the importance of information security, information security measures, and the Act on the Protection of Personal Information and other related laws and regulations. Furthermore, we have enhanced the content of case studies on personal information protection that can be used in meetings and training sessions at each organization.

FY2022 Information security e-learning session participants: Approximately 8,000 people