Osaka International Cancer Treatment Foundation (hereinafter referred to as "Our Foundation") provides safe and secure medical cancer treatment through heavy ion therapy, and improves medical and welfare of cancer treatment in Osaka Prefecture as well as in other parts of Japan and internationally. Our basic philosophy is to contribute to the elimination of cancer. In order to provide high-quality medical services depending on the condition of patients and users (hereinafter referred to as "patients"), personal information of patients is required. Furthermore, in order to enable patients to safely receive our medical services, it is our responsibility to securely and appropriately manage personal information about patients, and for this policy to be formulated and executed.

1. Proper acquisition of personal information

The acquisition of personal information is carried out by lawful means when it is necessary for our Foundation’s business activities and, as a rule, we clarify the purpose of its use and notify those involved.

2. Use and management of personal information

Personal information is used within the scope of the purpose of use specified in advance unless otherwise specified by law. Regarding the management of personal information, we keep the contents accurate and up-to-date to the extent necessary for the purpose of use. In addition, we properly educate and supervise our staff to prevent personal information from being leaked, lost, destroyed, altered, or suffer unauthorized access.

3. Provision to third parties

Personal information will not be provided to third parties unless consent is obtained from patients, unless it is deemed necessary by law or as a request from a public organization. In addition, when outsourcing the handling of personal information to other businesses, we will properly manage and supervise the outsourcing company for confidentiality management.

4. Disclosing, correcting, suspension of use of personal information by request from patients

Regarding personal information held, in case there is a request for disclosure, correction, or suspension of use from the applicable patient, such action will be made unless there is a special reason. For complaints and inquiries regarding the handling of personal information, a consultation counter will be set to respond promptly and appropriately.

5. Preparation of personal information protection regulations and implementation of audits

In order to implement this policy, we will create personal information protection regulations and other handling regulations and familialize the executives, employees and others concerned. We will also conduct regular audits to continuously review and improve our business operations.

Enacted on April 1, 2017