1. We will not provide personal data to a third party without obtaining prior consent from the individual, except in the following cases:
(a) When based on laws or regulations, including ordinances;
(b) When it is necessary to protect a person’s life, body, or property, and it is difficult to obtain the person’s consent;
(c) When it is particularly necessary to protect public health or promote the sound growth of children and it is difficult to obtain the consent of the person concerned;
(d) When it is necessary to cooperate with a national agency, a local government, or an individual or entity entrusted by either a national agency or local government to execute affairs prescribed by law, and obtaining the consent of the individual is likely to impede such cooperation.
(e) Cases in which personal data is provided to an academic research institution, etc., and such academic research institution, etc. need to handle the personal data for academic research purposes (including cases where the purpose of handling such personal data is partly for academic research purposes, and excluding cases where there is a risk of unreasonable infringement on the rights and interests of individuals); and
(f) When we notify or announce matters as required by law in advance; and when we notify the Personal Information Protection Commission.

2. In the following cases, the recipient of the personal data will not be considered a third party:
(a) When the Company outsources all or part of the handling of personal data within the scope necessary to achieve the purpose of the use as described in 4 (1);
(b) When personal data is provided in connection with a business succession due to a merger or other reasons; and
(c) When personal data is provided to persons specified as joint users in accordance with laws.