Personal Data Protection Policy

Mitsubishi Research Institute, Inc., (hereinafter referred to as the "Institute") believes that it is its social responsibility to properly manage and protect personal information and specific personal information. We hereby set forth the following as our personal information and specific personal information protection policy. All officers, employees, and other staff members shall be kept fully aware of the policy, and we shall make every effort to ensure the protection of personal information and specific personal information.

The Institute shall adopt and maintain a system to manage and protect personal information (including specific personal information, and hereinafter "Personal Information") and comply with designated internal regulations for the proper collection, use, and disclosure of Personal Information.

When collecting and using Personal Information, the Institute shall specify the purposes of usage, and will manage Personal Information appropriately within the necessity of achieving the purposes specified. We shall take measures to prevent the usage for purposes other than we specified.

The Institute shall not provide or disclose Personal Information to any third parties other than to entities to which the Information subject's consent has been given, excluding cases provided by law. The Institute shall not provide or disclose specific personal information to any third parties, excluding cases provided by law.

The Institute may entrust Personal Information to outside parties for such purposes as questionnaire issuance and Information processing. In such cases, we shall select organizations whose standards for Personal Information management fulfil our security requirements, and we shall appropriately manage and oversee the entrusted parties.

The Institute shall adopt security measures to prevent unauthorized access to, leaking, tampering, destruction, or loss of Personal Information held by the Institute in order to ensure the security and accuracy of Personal Information. In the event that a problem arises, we shall make every effort to prevent the damage from spreading, and corrective measures shall be taken promptly.

The Institute shall designate a contact point for complaints and inquiries from the subjects of Personal Information and respond to such complaints and inquiries properly.

To properly maintain our Personal Information protection system, we shall create and implement a compliance program. Moreover, we shall periodically audit the implementation of the program and endeavor to upgrade it on an ongoing basis.

To properly maintain our Personal Information protection system, we shall create a Personal Information protection management system. Moreover, we shall conduct periodical audits on the implementation of the system and endeavor to upgrade it on an ongoing basis.