Notice of Revisions to "Handling of Personal Information by JAL Group Airlines" (Privacy Policy)

JAL Group Airlines shall appropriately manage and protect the customers' personal information, in accordance with "JAL Group's Basic Policies on Information Security and the Protection of Personal Information."

*Safety Management Measures

(1) Organizational safety management measures

Japan Airlines has established the Risk Management and Information Security Committee, which decides policies and measures relating to information security and personal information protection of the JAL Group. We have also introduced a system that strictly separates the management of Personally Identifiable Information from Non Personally Identifiable Information in order to reduce risks and respond promptly to incidents.

(2) Human safety management measures

We conduct Information Security Training regularly for all JAL Group employees and obtain a Written Confirmation concerning the handling of personal data.

(3) Physical safety management measures

In areas where Personally Identifiable Information is handled, the entry and exit of employees is controlled to prevent unauthorized access to personal data. Measures are implemented to restrict internet access of devices over internal systems that handle Personally Identifiable Information.

(4) Technical safety management measures

Anti-virus measures and anti-leakage measures are implemented to protect systems that handle personal data from unauthorized external access and unauthorized software. We also conduct cyber threat monitoring 24 hours a day, 365 days a year to prevent unauthorized access and virus infection.

(5) Understanding of the external environment

When providing personal data to an overseas third party, we implement necessary safety management measures with an understanding of personal information protection laws of that country.

*Please refer to 6. (1) below for major personal information protection laws of other countries.

When providing personal data to overseas business operators such as contractors and partner airlines, JAL Group airlines implement necessary and appropriate measures in accordance with applicable laws and regulations of said country.

When required under law, we may provide information about your reservations and itinerary including your passport, visa and API to the customs and immigration authorities of the countries of departure, arrival, transfer and/or transit.

(1) Please refer to the following for major personal information protection laws of other countries

(Personal Information Protection Commission website: Survey on personal information protection laws of other countries)^*1

(2) Please refer to the following for our international destinations.

International routes and flight schedule^*2