October 18, 2021
To whom it may concern
Z Holdings Corporation Kentaro Kawabe
President and Representative Director, Co-CEO Stock Code: 4689
(Update) Future Efforts to Strengthen Group Governance in Response to
the Final Report Received from the Special Advisory Committee on Global Data Governance Regarding LINE's Handling of Data, Etc.
In regards to the overseas handling of personal information of users in Japan using LINE, a communication app provided by LINE Corporation (hereinafter "LINE"), a consolidated subsidiary of Z Holdings Corporation (hereinafter "ZHD"), ZHD established the Special Advisory Committee on Global Data Governance (hereinafter "Special Advisory Committee") on March 19, 2021, a committee consisting of external experts to verify and evaluate the handling of data in the Z Holdings Group from security and governance perspectives.1
Since its establishment, the Special Advisory Committee has examined and evaluated data governance and other issues related to access to data in Japan from LINE's global bases. As announced today in "(Update) Final Report Received from the Special Advisory Committee on Global Data Governance Regarding LINE's Handling of Data, Etc.," ZHD received the final report from the Special Advisory Committee.
In response to the recommendations from the Special Advisory Committee, the ZHD Group will further promote initiatives that are already in place and appropriately share, with its Group companies, the knowledge gained through LINE's efforts to strengthen company-wide governance and risk management functions as well as other cases, and further promote Group-wide efforts to improve governance.
Please refer to the attached ZHD press release for more information.
ZHD expects the impact of this matter on the Group's consolidated business results for FY2021 to be minor. Should there be any matters that need to be disclosed in the future, they will be announced promptly.
1 Announced in "Handling of Personal Information, Etc. at LINE Corporation" dated March 24, 2021.
This is an English translation of the captioned release. This translation is prepared and provided for the purpose of the reader's convenience. All readers are recommended to refer to the original version in Japanese of the release for complete information.
October 18, 2021
Z Holdings Corporation
Final Report Received from the Special Advisory Committee on Global Data Governance, and Future Efforts to Strengthen Group Governance
Z Holdings Corporation (hereinafter "ZHD") has today received the final report from the Special Advisory Committee on Global Data Governance, a committee consisting of external experts to verify and evaluate the handling of data in the ZHD Group from security and governance perspectives.
The outline of the final report is as follows:
Overview etc. of the Special Advisory Committee
Status of cross-border data access and data storage related to LINE app
Results of the verification on LINE Corporation's governance, and LINE Corporation's improvement measures
Status of group companies that handle the important data of LINE Corporation
Status of data governance in LINE Corporation, and recommendations for improvement
Status of data governance in ZHD, and recommendations for improvement
For more information on the final report by the Special Advisory Committee, please click here.
In response to the Special Advisory Committee's recommendations, ZHD will further promote and strengthen the initiatives that are already in place and implement new initiatives to strengthen the governance of the entire Group.
(Noted in the Secondary Report)
Establishment of the Data Governance Working Group
The Data Governance Working Group was established within the Risk Management Committee as a meeting body whereby those responsible for "research and development," "data utilization," and "security and privacy protection" jointly discuss the state of data governance and strengthen the aforementioned three areas in a well-balanced manner. The Working Group formulates the ZHD Group's data governance policy and rules, evaluates and audits each Group company's compliance with the said rules, recommends corrective actions, and takes other measures as necessary.
Introduction of a "Three-Line Model"
In order to operate businesses in compliance with the rules set by the Data Governance Working Group, a "Three-Line Model" (three defensive lines) is introduced to the ZHD Group companies and each line is responsible for the following:
First Line: As risk owner, appropriately evaluates risks and controls the risks;
Second Line: Audits and evaluates the appropriateness of activities of the First Line, and provides advice to the First Line;
Third Line: Audits and evaluates the appropriateness of the activities of the Second Line, and provides specific advice for improvement if there are problems.
Based on this concept of the "Three-Line Model," each ZHD Group company will implement a specific three-line governance system in a way that matches the actual situation of each company.
Establishment of "horizontal and vertical governance structure from the user's perspective" In addition to the implementation of the "Three-Line Model," the ZHD Group will establish horizontal and vertical governance structures:
The horizontal governance structure will be established by strengthening the second line of governance in each company and will enable each company to achieve an autonomous governance structure that is in line with its business situation; and
Through the Data Governance Working Group, the vertical governance structure will achieve governance that is centralized across the entire Group and responds to the global business operating environment. ZHD will continuously report on the status of measures taken in ZHD and LINE Corporation (hereinafter "LINE") to the Panel of Experts, etc., to be separately established by ZHD, and will ensure that the measures are implemented while receiving advice from the panel.
Measures to be taken in individual areas to improve ZHD's global data governance Based on the recommendations of the Special Advisory Committee in the areas of: engagement with the public sector, economic security, security, privacy, risk management, and other individual areas, ZHD will take appropriate measures in a timely manner so that the Group companies will comply with NIST standards1 and protect not only personal information but also personal data.
(Excerpt from the Final Report p.88)
Security standards such as SP800-171 established by the U.S. National Institute of Standards and Technology (NIST).
Information about some person, such as information about the user entered when using the service, history of web page browsing and searching, and history of purchases from shopping services (includes information that does not include names and addresses, but may lead to personal identification).
ZHD will further promote initiatives that are already in place and appropriately share, with its Group companies, the knowledge gained through LINE's efforts to strengthen company-wide governance and risk management functions as well as other cases, and further promote Group-wide efforts to improve governance. In addition, ZHD will continue to sincerely address the opinions and suggestions of users and experts, and work to increase the transparency to society and to create an environment where users can use its services with a sense of security.
For more information on the Special Advisory Committee meetings held in the past, please click here.
Unless otherwise specified, English-language documents are prepared solely for the convenience of non-Japanese
This is an excerpt of the original content. To continue reading it, access the original document here.
Z Holdings Corporation published this content on 18 October 2021 and is solely responsible for the information contained therein. Distributed by Public, unedited and unaltered, on 18 October 2021 08:01:03 UTC.