• Basic Approach
• Strategy
• Main Initiatives
• Featured
• Download Report

Basic Approach

At the Nikon Group, we believe that our information assets are the foundation of our corporate activities, and we treat information assets in accordance with the Nikon Group Information Security Policy. We have established several internal rules based on this policy and pursue information management that complies with the laws and regulations of each country and region. These rules and regulations are always available to employees via the corporate intranet portal. We continue to improve the level of operation through periodic education and compliance status checks.

Related Policies

• Nikon Group Information Security Policy (PDF:359KB)

Strategy

The Nikon Group engages in systematic information security measures and information asset management to ensure business continuity and to enhance the trust of society. In the short-to-medium term, we intend to improve governance and cyber resilience incorporating zero-trust thinking, in addition to enhancing risk response and global security structure in connection with the use of AI. Over the long term, we will pursue preemptive risk management and the establishment of a security culture throughout the company. In this way, we aim to establish a company-wide risk management system that supports sustainable improvements in enterprise value.

Main Initiatives

Response to Information Security Incidents

The Nikon Group clearly defines information security incidents under the Nikon Group Information Management Rules. These regulations require the reporting of incidents from the department impacted to the Information Security Department. The Information Security Department works with relevant divisions to unify procedures from initial response to containment, impact assessment, and recovery, striving to minimize damage and impact, while resuming business operations promptly. Serious cases are promptly escalated to the responsible officer (CISO) for systematic decision-making and response.
In fiscal year 2025, we conducted an incident response drill with relevant divisions to confirm the effectiveness of our response procedures and communication system.
We have noted no serious information security incidents involving fines or compensation payments over the past three years.

Personal Information Protection

The Nikon Group has established the Nikon Group Privacy Protection Statement based on our respect for privacy and acknowledgment that processing personal data in a lawful and proper manner is an important social responsibility.
Additionally, under this statement, we established the Nikon Group Personal Data Processing Rules as a common set of rules covering the entire Group. We are now working to make these rules known within the Group and ensure that personal data is handled in accordance with these rules under the information management system. We conduct a questionnaire-based survey on the status of compliance with the Nikon Group Personal Data Processing Rules roughly once a year.

In addition, the Compliance Department oversees matters related to personal information and manages risk related to privacy and personal information for the entire Nikon Group.

Our specific initiatives include posting privacy notices on the website of each Nikon Group company in accordance with relevant laws and regulations, and notifying customers of contact information for support regarding privacy and individual rights. This includes the purpose of use of personal information and how to delete their personal information.

In addition, we request that procurement partners follow the Nikon CSR Procurement Standards in order to maintain information security, including privacy protection.

• Nikon Group Privacy Protection Statement
• Privacy Notice of Nikon Europe B.V. in accordance with the EU General Data Protection Regulation (GDPR)
• CSR Procurement | Procurement

Featured