JAL Group's Basic Policies on Information Security and the Protection of Personal Information

In light of the importance of information security and the protection of personal information in an advanced information society, the JAL Group manages and protects information that the company possesses under the following Group policies.

1. Compliance with Regulations

JAL complies with laws, regulations and guidelines stipulated by administrative bodies.

2. Establishment of management system

JAL has established an internal management system and clearly specifies division of responsibilities.

3. Compliance with internal policies, regulations and guidelines

JAL has established and complies with internal policies, regulations and guidelines.

4. Implementation of safety measures

JAL carries out safety measures and takes steps to prevent inappropriate access to information or the loss, destruction, falsification and leak of information.

5. Implementation of education and awareness programs

JAL promotes education and awareness programs for employees and ensures that information is appropriately managed, while striving to improve knowledge and awareness of information management.

6. Affiliation with external vendors

When entrusting operations related to information management to other companies, JAL selects companies with strong experience and abilities. The contract mandates confidentiality and guarantees that the information will be properly managed.

7. Efforts to improve operations

JAL regularly checks to ensure that information is managed appropriately and works to improve operations on a continual basis.

8. Response in event of accident

In the unlikely event of an accident, JAL endeavors to minimize the damage, quickly releases necessary information and takes all necessary steps to prevent a reoccurrence.

9. Designation of contact

JAL will set up a contact point to which customers may direct their inquiries, complaints, and requests. JAL will respond quickly and with integrity.

10. Release of policies

JAL will disclose its policies on information security and the protection of personal information, including this policy, by posting them on its web site.

To page top

Management of Reservation Information

Japan Airlines Co., Ltd., Japan Transocean Air Co., Ltd., JAL Express Co., Ltd., J-Air Co., Ltd., Japan Air Commuter Co., Ltd., and Ryuku Air Commuter Co., Ltd. (hereafter, JAL) manage reservation registrations in the following manner.

1. Protection and management of personal information

JAL understands the importance of the personal information provided by its customers and handles it with the greatest possible care, managing the information on its computer system under strict controls.

2. Joint use by the JAL Group

JAL shares reservation information with the JAL Group companies listed below (scope of users) to provide services closely related to air travel such as tours, hotels and luggage delivery as well as operations incidental to these services.

• Data items used jointly: Information deemed necessary for services closely related to air travel such as air transportation, tours and hotels as well as operations incidental to these services. This information would include the customer's name, telephone number, age, gender, type of JAL Mileage Bank(JMB) member and member service qualification, special needs such as a wheelchair, etc.
• Scope of users: JAL, JALCARD Inc., JALPAK Co., Ltd., JAL Hotels Co., Ltd., and JAL ABC Inc.
• Supervisors: Japan Airlines Co., Ltd.

3. Providing reservation information to travel companies

JAL provides the aforementioned information to relevant travel companies when the customer submits his/her JMB member number and reservation number.

4. Inquiries

JAL Offices will address any inquires or changes customers request related to their reservation information and will respond as quickly as is reasonably possible.

5. Providing information to third parties

JAL does not provide or disclose reservation information to third parties without the express consent of the customer and unless mandated by law.

To page top

Management of JAL Mileage Bank (JMB) Member Information

Japan Airlines Co., Ltd., Japan Transocean Air Co., Ltd., JAL Express Co., Ltd., J-Air Co., Ltd., Japan Air Commuter Co., Ltd., and Ryuku Air Commuter Co., Ltd. (hereafter, "JAL") manage the personal information of JMB members in the following manner.
(The section below is excerpted from the JMB general byelaws effective as of February 1, 2007)

Article 42 Management of personal information

JAL recognizes the importance of the personal information submitted by Members in the JMB operations, treats it with the utmost care, and safeguards it under a strict computerized security system.

Article 43 Usage of personal information

JAL Group Companies (JAL and the following affiliated companies; the "JAL Group Companies") may use the following personal information submitted by Members for the purpose of mileage credit, management of award usage, provision of air transportation service, service offers closely related air travel such as package tours and hotels, notices about promotional materials and questionnaires, including those of the partner companies, and product developments and their subordinate works:
Membership number, name, birth date, gender, address, telephone number, fax number, e-mail address, place of employment (company name, department, title, office address, telephone number, fax number), addressee, types of Membership cards, FLY ON Program/JGC service status, jurisdictional region, mileage balance, and necessity of wheelchair arrangements.
JAL Group Companies: JAL Group Airlines, JALCARD Inc., JALPAK CO. LTD., JAL Hotels Co. Ltd., JAL PLAZA Co. Ltd., and JAL subsidiary companies for reservations, sales and airport handling.
Managing Company: Japan Airlines Co., Ltd.

Article 44 Provision of information to travel angencies

When a Member provides his or her JMB membership number to a travel agency, JAL will provide the travel agency with information that is necessary to operate its air travel services such as air transportation, package tours and hotels etc., such as membership number, name, age, gender, telephone number, types of membership cards, FLY ON Program/JGC status, jurisdictional region and necessity of wheelchair arrangements.

Article 45 Inquiries about personal information

Members' requests for changes or deletions to their own registered personal information or other inquiries shall be dealt with in a reasonably prompt manner if Members themselves contact JMB having jurisdiction. If Members have questions or concerns about the handling of the personal information, JMB will deal with them.

Article 46 Provision of personal information to third parties

JAL will not provide the personal information to third parties without the prior consent of the Member unless the provision is stipulated in these JMB Rules and Conditions or is requested in accordance with laws or regulations.

Article 47 Provision of personal information to partner airlines

JAL shall provide partner airlines with information on FLY ON Program service status members or JAL Global Club members such as JMB membership number, members name, gender, and service status so that partner airlines can provide high quality reservation, air transportation and other ancillary services for top tier members.

To page top

Management of Information Registered on Other Web Sites

Personal information entered or registered on the web site through responses to on-line questionnaires and submissions to events such as sweepstakes is managed as outlined below.
Please refer to the relevant page for information on reservation information and management of JMB member information.

1. Protection and management of personal information

JAL prioritizes the protection of the personal information provided by its customers and handles it with the greatest possible care.

2. References, changes, and discontinuation of use of personal information

Customers should contact the JAL Internet Help Desk to request references, changes and discontinuation of use of personal information entered or registered on the JAL web site.

3. Providing and disclosing personal information.

JAL does not provide or disclose reservation information to third parties without the express consent of the customer and unless mandated by law.

4. Personal information on linked web sites

JAL is not responsible for personal information collected on the web sites of other companies introduced on this web site.

5. Data protection

To protect the customer's personal information collected on this web site, the SSL (Secure Sockets Layer) Protocol is used on the JMB member page, the credit card settlement page and other pages requiring the entry of personal information such as on-line questionnaires. This protocol encrypts Internet data and prevents leaks.

To page top