Strengthening Governance with a Global Perspective

We are committed to protecting the privacy of our customers around the world.

The ANA Group wishes to promote privacy protection from a global perspective in order to help to fulfill the hopes and dreams of an interconnected world with "the wings within ourselves". This page explains our efforts to comply with the laws and regulations of countries around the world as well as our ongoing consideration for privacy.

Efforts to Comply with the Laws and Regulations of Each Country

ANA Group regularly revises privacy policies and internal regulations in compliance with the personal information protection laws and regulations of Japan and various countries. We also strive to collect updated information on laws and regulations globally in cooperation with ANA overseas offices and Group companies.

In order to comply with the laws and regulations of each country, we collaborate with ANA’s overseas offices and group companies.

Conducting Checks and Internal Audits

ANA Group conducts inspections of the handling of personal data to ensure and confirm compliance with laws and internal regulations among companies within and outside the ANA Group. These inspections are primarily carried out by Data & Privacy Governance Team, and regular self-assessments by departments and companies concerned are also performed. Additionally, internal audits are conducted by the Audit Department, taking a fair and objective standpoint to confirm that customers‘ personal information is being handled appropriately. If any issues are found as a result of conducting checks or internal audits, we promptly take corrective actions and make improvements.

We conduct checks and internal audits, as well as incorporate of various third-party perspectives.

Three lines of defense

In order to conduct effective checks and internal audits, we have established three lines of defense as follows.

In order to conduct effective checks and internal audits, we have established three lines of defense. The first line of defense refers to business departments which proactive risk control. The second line of defense refers to administrative departments which as a dedicated organization, ensure status of compliance with laws and internal regulations, conducts operational status checks, and provides support for improvements and corrective actions.(Data & Privacy Governance Team) The third line of defense refers to internal audit department which conduct audits in an independent and neutral position and follow-up. Each of the three lines of defense plays its role.
In order to conduct effective checks and internal audits, we have established three lines of defense. The first line of defense refers to business departments which proactive risk control. The second line of defense refers to administrative departments which as a dedicated organization, ensure status of compliance with laws and internal regulations, conducts operational status checks, and provides support for improvements and corrective actions.(Data & Privacy Governance Team) The third line of defense refers to internal audit department which conduct audits in an independent and neutral position and follow-up. Each of the three lines of defense plays its role.

Incorporation of Various Third-Party Perspectives

ANA Group ensures that we understand the demands of society and further improve our organizational structure for privacy protection for the purpose of handling and utilizing personal data in a manner that is trusted by our customers and society. To this end, we are actively incorporating the perspectives of outside experts and continuously exchange opinions with other companies that have advanced privacy protection initiatives.

  • Support from outside experts

    Support from outside experts

  • Different companies gather to hold an exchange of opinions.

    Exchange opinions with other companies

pagetop