Security Policy

JAL Group's Basic Policies on Information Security and Protection of Personal Information

In order to ensure the provision of air transportation services for passengers and cargo, to name a few, the JAL Group considers the importance of information security and the protection of personal information in an advanced information and telecommunications society, as well as the increasing risk of information security affecting flight safety. The JAL Group manages and protects information that the company possesses under the following Group policies.

 

Information held by the JAL Group refers to all information, including financial , sales , personal, and technical know-how, regardless of the storage medium, such as electronic or paper.

1. Compliance with Regulations

  • JAL complies with laws, regulations and guidelines stipulated by administrative bodies.

2. Establishment of management system

  • JAL will appoint an administrator responsible for information security and personal information protection within the Group, establish a management system, and clarify the division of responsibilities.

3. Compliance with internal policies, regulations and guidelines

  • JAL has established and complies with internal policies, regulations and guidelines.

4. Implementation information security measures (Protection of information assets)

  • JAL has implemented information security measures (protection of information assets).
  • JAL carries out safety measures and takes steps to prevent inappropriate access to information or the loss, destruction, falsification and leak of information.
  • The confidentiality, integrity, and availability of information will be protected within JAL.

5. Clarification of Employee Roles and Responsibilities and Implementation of education and awareness programs

  • JAL clarifies the roles and responsibilities of employees to ensure information security and personal information protection.
  • JAL promotes education and awareness programs for employees and ensures that information is appropriately managed, while striving to improve knowledge and awareness of information management.
  • JAL fosters a culture of fair information security and ensure that information is properly managed.

6. Affiliation with external vendors and suppliers

  • JAL has selected parties with sufficient experience and competency will be selected when outsourcing information management services to other companies or dealing with suppliers who handle information.
  • The contract will stipulate confidentiality obligations and other matters necessary to maintain the JAL Group's information security and personal information protection standards and will require compliance with this policy to ensure that information is properly managed.

7. Efforts to improve operations

  • JAL regularly checks to ensure that information is managed appropriately and works to improve operations on a continual basis.
  • JAL has implemented initiatives to improve our operations, including continuous investment in information security systems.

8. Threat Monitoring and response in event of accident

  • JAL monitors information security threats. In the unlikely event of an accident, JAL endeavors to minimize the damage, quickly releases necessary information and takes all necessary steps to prevent a reoccurrence.

9. Designation of contact

  • JAL will set up a contact point to which customers may direct their inquiries, complaints, and requests. JAL will respond quickly and with integrity.

10. Review and release of policies

  • JAL will be reviewed at regular intervals and disclose its policies on information security and the protection of personal information, including this policy, by posting them on its website.

Security of this website

1. Data protection

To protect the customer's personal information collected on this website, the SSL (Secure Sockets Layer) Protocol is used on the JMB member page, the credit card settlement page and other pages requiring the entry of personal information such as online questionnaires. This protocol encrypts Internet data and prevents leaks.

2. Use of Cookies