Policy on the Protection of Personal Information

EPRX is aware of the importance of the proper handling of information that can identify individuals (“Personal Information”) and takes the following measures to protect Personal Information.

1. Compliance with laws and regulations

EPRX complies with laws and regulations concerning the Personal Information as well as other social norms.

2. Establishment of systems

EPRX continuously implements training and awareness-raising measures for employees, has appointed personnel responsible for the protection of Personal Information in each workplace, and strives to appropriately manage Personal Information.

3. Security measures

EPRX strives to ensure the accuracy of Personal Information and establishes rules governing the handling of personal data and implements organizational, human, physical, and technical measures to prevent the loss, destruction, falsification, and leak of Personal Information. Details of those measures are set forth in Table 1.

Table 1. Security measures
Details of measures implemented Specific methods
(1) Establishment of rules relating to the handling of personal data
  • Rules are established on the handling of personal data covering handling procedures, persons responsible and persons in charge, and their respective duties and so on at each stage of acquisition, use, retention, provision, deletion, and disposal.
(2) Organizational security measures
  • A person responsible for the handling of personal data has been appointed, personnel who handle personal data and the scope of personal data handled by those employees is clarified, and a framework for reporting to the person responsible in the event of becoming aware of any fact or indication of a violation of laws or handling rules has been established.
  • Self-inspections regarding the status of personal data handling are periodically implemented and audits by other departments and outside parties are conducted.
(3) Human security measures
  • Employee training on points of note regarding the handling of personal data is regularly conducted.
  • Matters relating to the maintenance of confidentiality with respect to personal data is expressly provided in the employment rules.
(4) Physical security measures
  • Measures including managing entry and exit by employees and restricting equipment brought into areas where personal data is handled are implemented.
(5) Technical safety measures
  • Access control is conducted to limit the scope of personnel who can handle Personal Information and Personal Information databases that they handle.
  • Mechanisms are introduced to protect information systems on which personal data is handled from unauthorized external access and malicious software.

4. Purposes of use

EPRX uses Personal Information in its possession to the extent necessary to engage in the businesses set forth below and specified in EPRX’s Articles of Association:

  1. Establishing a supply and demand balancing market;
  2. Operating a supply and demand balancing market; and
  3. All other business ancillary or related to the business specified in the preceding items.

5. Proper acquisition

EPRX acquires Personal Information using appropriate means.

6. Use within scope of purposes

EPRX appropriately uses acquired Personal Information within the scope of the purposes of use.

7. Provision to third parties

Except in those cases specified in laws and regulations, such as outsourcing of operations, EPRX does not provide Personal Information to third parties without obtaining the relevant individual’s prior consent.

8. Requests for disclosure

If EPRX receives a request for the disclosure, correction, deletion, or discontinuation of use of acquired Personal Information, after confirming the requester’s identity, it shall promptly comply with such request in accordance with laws and regulations.

9. Inquiry Desk

If you have any concerns, opinions, or questions regarding the handling of Personal Information by EPRX, please contact the following Personal Information Inquiry Desk in Japanese.

Personal Information Inquiry Desk
Electric Power Reserve Exchange
Keidanren Kaikan, 1-3-2 Otemachi, Chiyoda-ku, Tokyo, Japan 100-0004
Mail madoguchi@eprx.or.jp

EPRX continuously reviews and strives to improve its measures relating to the protection of Personal Information including this policy.
(Established April 1, 2024)