Chapter Privacy Policy

  

                                                                                                                                             March 2, 2026

 

     The ISACA Osaka Chapter (hereinafter referred to as “this Chapter”) operates primarily to

     develop and educate members' capabilities in auditing and management services related to

     information systems. This Chapter recognizes the importance of protecting personal

     information and handles personal information in accordance with the following Privacy Policy.

 

  1.    Basic Policy

         (1)    The Chapter will comply with the Act on the Protection of Personal Information, other

                   laws and regulations, and relevant guidelines, and will appropriately acquire and

                   manage your personal information.

          (2)    The Chapter will not use your personal information for purposes other than those specified.

          (3)    The Chapter will appropriately address your requests, inquiries, complaints, and other

                   matters concerning personal information.

 

      2.    Handling of Personal Information

          (1)    Purpose of Use for Acquired Personal Information This branch will use personal information

                   for the purposes listed below in conducting its various activities.

           ① Providing information about this branch's publications (including website/email) 

           ② Providing information about and operating general meetings, board meetings, monthly

                meetings, special lectures, and qualification exam briefings

           ③ Managing membership, membership fee payment status, and the appointment and subsequent

                management of directors

           ④ Managing continuing education program hours through activities such as conducting

                qualification exam review courses

           ⑤ Social contribution activities, including making proposals, conducting statistics and

                surveys regarding various activities, and responding to inquiries from public institutions

           ⑥ Responding to various inquiries from members and maintaining records within this branch

           ⑦ Branch website operation, access analytics, and information security assurance

           ※ Information collected: Log data (IP address, access date/time, browser information such

                as cookies), etc.

           This information will not be used for purposes such as cross-referencing to identify individuals. 

            【Overview of Branch Activities】

                ・Provide education to enhance members' knowledge and capabilities in the fields of

                    information system auditing, controls, security, risk, and governance.

                ・Conduct research on techniques, methodologies, and issues related to information

                    system auditing, controls, security, risk, and governance.

                ・Provide members with useful information in the fields of information system auditing,

                    controls, security, risk, and governance, while fostering mutual friendship among members.

                ・Promote the necessity of establishing controls, security, risk control, and governance for

                    information systems to executives and information system stakeholders.

                ・Conduct other activities necessary to achieve the objectives of this branch.

            (2)    Regarding Third-Party Provision This branch will not disclose or provide personal information

                     to third parties except in the following cases:

            ①  When consent is obtained from the individual.

            ②  When outsourcing operations to external contractors bound by confidentiality agreements,

                  within the scope of the intended use.

            ③  When disclosure or provision of personal information is required by laws, regulations, or similar

                  provisions.

            ④ When business operations are transferred due to merger, division, or other reasons.

            (3)    Regarding Joint Use This branch does not engage in joint use of personal information.

            (4)    Regarding Retained Personal Data

            ① Name of the Personal Information Handling Entity ISACA Osaka Branch

            ② Purpose of Use for All Retained Personal Data As stated in 2.(1) Purpose of Use for

                 Acquired Personal Information above

            ③ Procedures for Responding to Requests for Disclosure, etc. (Including Opt-Out)

            (a)    Recipient of Requests for Disclosure, etc.    Director in Charge of Membership

            (b)    Method for Submitting Requests for Disclosure, etc.    

                    By email to osk-office@isacaosaka.org

            (c)    Application Form Format    Free format, but must include information helpful for

                    identifying the retained personal data

            (d)    Identity Verification Method    By sending a confirmation email to the registered email address

            (e)    Fee    None

            ④ Complaint Submission Contact Membership Director: ISACA Osaka Chapter Secretariat

                (within Io Research Institute Co., Ltd.) 1-47 Minamitakeya-cho, Amagasaki city, Hyogo Prefecture

                E-MAIL: osk-office@isaca-osaka.org

            (5)    Procedures for Responding to Requests for Disclosure, etc. As per the procedures for

                     responding to “Requests for Disclosure, etc.” in Section 2.(4)③ above.

            (6)    Contact Point for Inquiries and Complaints As per the complaint submission contact 

                     point in Section 2.(4)④ above.

 

       3.    Security Measures for Personal Information

           This branch maintains the accuracy of personal information and manages it securely.

           Furthermore, to prevent loss, destruction, falsification, leakage, etc., of personal

           information, we implement organizational, human, physical, and technical security

           management measures.

           We implement appropriate information security measures against unauthorized access,

           computer viruses, etc. Additionally, we supervise directors and contractors appropriately

           and as necessary regarding the handling of personal information and data.

           In the event of a personal data leak or similar incident, we will take appropriate actions

           based on the Act on the Protection of Personal Information and related laws and

           regulations, including reporting and notifying the individual concerned and relevant

           authorities such as the Personal Information Protection Commission.

 

       4.    Continuous Improvement of the Management System

           To implement this policy, this branch shall establish regulations concerning personal

           information protection and conduct continuous review and improvement. We shall also ensure

           thorough awareness of these regulations among directors and other personnel involved in

           branch operations.

 

        Revision History

         Initial Version     May 19, 2017

         Revision 2          March 2, 2026