Thank you for traveling with the JAL Group.
Effective April 1, 2022
Please refer to the following for details.
Please scroll horizontally.
|Until March 31, 2022||Effective April 1, 2022|
|1. Obtaining Personal Information and Purpose of Use||(Omitted)||NO Change|
|2. Management and Protection of Personal Information||JAL Group Airlines shall appropriately manage and protect the customers' personal information, in accordance with "JAL Group's Basic Policies on Information Security and the Protection of Personal Information."||
JAL Group Airlines shall appropriately manage and protect the customers' personal information, in accordance with "JAL Group's Basic Policies on Information Security and the Protection of Personal Information."
*Safety Management Measures
(1) Organizational safety management measures
Japan Airlines has established the Risk Management and Information Security Committee, which decides policies and measures relating to information security and personal information protection of the JAL Group. We have also introduced a system that strictly separates the management of Personally Identifiable Information from Non Personally Identifiable Information in order to reduce risks and respond promptly to incidents.
(2) Human safety management measures
We conduct Information Security Training regularly for all JAL Group employees and obtain a Written Confirmation concerning the handling of personal data.
(3) Physical safety management measures
In areas where Personally Identifiable Information is handled, the entry and exit of employees is controlled to prevent unauthorized access to personal data. Measures are implemented to restrict internet access of devices over internal systems that handle Personally Identifiable Information.
(4) Technical safety management measures
Anti-virus measures and anti-leakage measures are implemented to protect systems that handle personal data from unauthorized external access and unauthorized software. We also conduct cyber threat monitoring 24 hours a day, 365 days a year to prevent unauthorized access and virus infection.
(5) Understanding of the external environment
When providing personal data to an overseas third party, we implement necessary safety management measures with an understanding of personal information protection laws of that country.
*Please refer to 6. (1) below for major personal information protection laws of other countries.
|3. Provision of Personal Data to a Third Party||(Omitted)||NO Change|
|4. Provision of Personal Information to Service Providers and Relevant Management||(Omitted)||NO Change|
|5. Joint Use of Personal Information||(Omitted)||NO Change|
|6. Transfer of personal data to an overseas third party||
When providing personal data to overseas business operators such as contractors and partner airlines, JAL Group airlines implement necessary and appropriate measures in accordance with applicable laws and regulations of said country.
When required under law, we may provide information about your reservations and itinerary including your passport, visa and API to the customs and immigration authorities of the countries of departure, arrival, transfer and/or transit.
(1) Please refer to the following for major personal information protection laws of other countries
(Personal Information Protection Commission website: Survey on personal information protection laws of other countries)*1
(2) Please refer to the following for our international destinations.
International routes and flight schedule*2
|7. Request for Disclosure, etc. and Inquiries||(Omitted)||NO Change|
Please access the following URL for "Handling of Personal Information by JAL Group Airlines" effective April 1, 2022.
April 1, 2022