(Note) Business Purposes in our Articles of Incorporation

1. Processing and sale of steel products
2. Manufacture and sale of magnetic materials
3. Manufacture and sale of metal processing machinery
4. Warehousing business
5. All businesses incidental to the preceding items

Scope	Details
Activities related to personal identification numbers of current and former employees, including their dependents and other immediate family	Withholding tax based on Income Tax Act, etc.
	Payment records based on Inheritance Tax Act, etc.
	Local taxes based on Local Tax Act, etc.
	Insurance based on Employment Insurance Act, etc.
	Insurance based on Health Insurance Act, etc.
	Employee pension insurance based on Employees’ Pension Insurance Act, etc.
	Third notification regarding national pension, etc.
	Creating/providing legal documents regarding financial commodity transactions pertaining to employee hareholding association
	Creating/providing legal documents regarding Workers’ Asset-Formation Savings
	Creating/providing legal documents regarding company pensions
Tasks concerning the personal identity number of individuals other than employees, including in relation to items on the right	Creating payment records of compensation, fees, etc. based on Income Tax Act
	Creating payment records of real estate fees, etc. based on Income Tax Act
	Creating payment records of equivalent value of transfers of real estate, etc. based on Income Tax Act

Items of Personal Data to be Shared	Personal information of directors and employees of the Company and its business partners, including name, organization/position, work address, telephone number, e-mail address, and other items related to business contact information
Scope of Joint Use	JFE Group Companies
Purpose of Use	Business communication
Name or title of the person responsible for the management of said personal data	JFE Shoji Electrical Steel Co.,LTD.

(Basic policy)

The JFE Group Personal Information Protection Policy ensures that such information is handled appropriately.

(Rules)

In-house rules stipulate the handling methods, persons responsible or in charge and duties thereof in each stage of handling personal data, including acquisition, use, storage, provision, deletion and disposal.

(Organizational measures)

The handling of personal data is ultimately the responsibility of the personal-information general manager (director overseeing General Administration Department), the personal-information supervisory section (General Administration Office of General Administration Department) and personal-information management supervisors (manager of each department). Furthermore, the JFE Group maintains a system to manage and handle personal data as well as to respond if such data is ever leaked or signs thereof are detected.
Legers are maintained to manage personal information, describing the type and range of data, purpose of usage, storage location, person responsible, storage period, etc. In addition, means are established to confirm personal-data handling conditions through periodic company-wide inspections of these ledgers.
Internal audits are conducted periodically to ensure adherence to internal procedures and rules as well as external laws, ordinances, etc. pertaining to handling personal information.

(Supervisory measures)

Employees are supervised and trained in the appropriate handling of personal data.

(Physical measures)

In physical areas where personal data is handled, measures to protect confidentiality include the planning of seating arrangements designed to prevent the viewing of personal data by unauthorized persons.
Measures are implemented to prevent the theft or loss of devices (terminals), external recording media, documents, etc. containing personal data.
Measures also are implemented to ensure that personal information cannot be easily identified when devices (terminals), external recording media, documents, etc. containing such data are transported within offices.
When deleting or discarding devices (servers and terminals), external recording media, documents, etc. containing personal data, methods are implemented to ensure that the data cannot possibly, or easily, be restored.

(Technical measures)

Access to systems containing personal information databases, etc. is restricted to employees authorized to view/use such data, and usage of such data is limited to the scope necessary for business.
Access to systems containing personal data requires identification, typically a user ID and password, to identify and authenticate the accessing person.
Measures are deployed to protect systems containing personal information from illicit external access and malware.
Additional measures are deployed to prevent personal information from being leaked, etc.

(External environment)

When handling personal information in a foreign country, local laws, procedures, etc. are periodically confirmed and reviewed and information-management measures are modified or newly introduced as required.

〒100-0004
9-5, Otemachi 1-chome, Chiyoda-ku, Tokyo
Otemachi Financial City North Tower 25F

JFE Shoji Electric Steel Co., Ltd.
Representative Director and President, Maki Otani