Verification! "Riku Navi" problem December 26, 20:02
A problem in which a recruiting carrier who operates the employment information site "Riku Navi" calculates the so-called "rejection rate for unscheduled job offers" without obtaining the student's consent and sells it to companies. On December 4, the government's Personal Information Protection Commission issued a second recommendation to the recruiting side and provided guidance to 37 companies that had contracts to purchase data. The company that calculated the undecided decline rate and the company that purchased it. All of these are large companies that rank high in the employment popularity ranking, but why did they treat student personal information lightly? I verified this problem again. (Kenta Shimai, Economic Department Reporter)
Going deeper into “illegal” decisions
A recruiting carrier that used AI technology to calculate the undecided decline rate and sold it to companies. Let's start with a look at where the problem was in the business, where the authorities pointed out it was illegal.
Until February 2019, recruiting carriers used electronic information called "cookies" to sell unofficial refusal rates to companies without identifying individuals, but since March, personal data has been directly Switched to the exchange method.
The government's Personal Information Protection Commission pointed out that there were cases in which the exchange of personal data between the recruiting carrier and the company had not obtained the student's consent since March.
In addition, when the handling of personal data was changed after March, appropriate measures were not taken in consideration of the law, and no measures were taken to safely manage personal data. Is contrary to.
In addition, the Personal Information Protection Committee explained that the company considered the privacy of the individual, and also provided data to the company until February, if the company analyzed the student ID etc., He stated that he provided extremely inappropriate services that deviated from the purpose of the law, assuming that the individual could be easily identified. The number of students who provided personal data to companies without permission reached 26,060.
Associate Professor Hiroshi Miyashita of Chuo University's Faculty of Policy Studies, who is familiar with the issue of personal information protection, said the following regarding the decision of the Personal Information Protection Committee.
Associate Professor Hiroshi Miyashita "In regards to services after March, it was pointed out that there was some kind of negligence due to the system change. In the past, the decision was made based on whether or not personal information could be identified by the provider, but this time, even if it could be identified by the provider, the purpose of the law was changed. He pointed out that he had escaped, which means that he just used cookies in a scheme that passed through the legal network. I guess he was killed. ''
On the other hand, the Ministry of Health, Labor and Welfare goes even further and determines that even if there is the consent of the student himself, the service that predicts the decline rate of job offers and sells itself violates the Employment Security Law.
The actual state of “governance failure”
In the first place, how did the unique service of student “decided to decline” be born? According to the company, the idea of a job drop rate came out during the summer of 2017 during a meeting of people in charge of job hunting-related businesses.
This idea was gradually shared by various departments, such as sales, product planning, and system development, and it was said that "the study progressed through repeated local collaboration." The idea of the field moves to the realization of the service in a moment. It sounds good to say that it is a bottom-up decision-making process that respects the spirit of venture, but there is a danger that allows runaway on the spot.
In explaining my parent company's recruiting and recruiting careers, I focused on the phrase "system for reviewing the absence of responsible persons." Absence of responsible person? What exactly is that?
According to the two companies, from the very beginning of the idea, there is no one responsible for understanding the whole picture of the product and making decisions, so it can take responsibility for how to deal with student personal data and privacy issues. It is said that there were no people.
Recruit means that when developing a new service, group companies usually assign a person who understands the whole picture of the business, but this time it was positioned as research and development of new business Therefore, the person in charge was absent.
In addition, the last forensic legal department was not functioning. The legal department of Recruit Career did not give enough consultation to the legal department of the parent company and easily gave the go-ahead.
Regarding this, Recruit Carrier summed up that there was a “governance failure” at the root of the service provided without the necessary check and settlement processes.
A model student of innovation ...
The Recruit Group is known as an entrepreneurial company that encourages employees to take on new businesses.
We develop various services for individuals such as "SUUMO", "Jalan", and "Hot Pepper" with the words of "Create opportunities yourself and change yourself with opportunities" left by founder Hiromasa Esue. The business model that creates corporate entrepreneurship was modeled on the innovation of Japanese companies.
Isn't such a successful experience causing slack or runaway on the spot? Regarding this, Recruit Career has said that no other case has been confirmed to have been commercialized without a responsible person, and said as follows.
"We do not understand that this issue is caused by 'runaway on the ground'. There was a gap in governance where services were provided without following the flow and internal payment process that should be in place. Failure. ”We believe that strengthening governance without losing our corporate culture is a very important theme.”
why? A renowned major company
On the other hand, the Personal Information Protection Commission has been obliged to provide personal data to 37 major companies, such as automakers and general trading companies, that had contracts to purchase undecided decline rates. He gave guidance on corrective actions, etc., as inappropriate.
What was the response of the major companies that were pointed out as inappropriate? NHK conducted a questionnaire survey on companies that announced that they had purchased a job offer decline rate.
Of the 22 companies that responded, they answered, "Is the recruiting carrier told me that it was appropriate?" When asked, "Are you considering beforehand whether it is appropriate in light of the Personal Information Protection Law and the Employment Security Law?" There are 10 companies. One company did not even "examine".
Associate Professor Hiroshi Miyashita: “Training for such companies is unusual, but the 37 companies that received the guidance originally assumed that they were responsible for obtaining the consent of students. This time, companies are so excited to use technologies such as AI. This is a symbolic case in which the fusion of technology and ethics did not go well.In the first place, if you think about what users think and stick to human-centered philosophy, there will be basically no big mistakes. If we did, we would have noticed that the service was rejected by the vast majority. ''
Is it possible to thoroughly manage from a user perspective?
The Recruit Group is striving to prevent recurrence by creating guidelines that determine how to handle personal data based on the advice of lawyers and other experts.
However, some students and experts who use the data without permission have pointed out that the company has insufficient explanations on important issues such as how to calculate the job offer refusal rate.
The focus is also on how the company discloses management responsibility. In response to interviews with NHK, Recruit Career says it is considering disposal to executives in accordance with internal regulations.
The question is whether recruit can thoroughly manage from the user's perspective and restore trust.
Ministry of Economic Affairs reporter Kenta Shimai Joined in 2012 Entered Miyazaki Bureau, Morioka Bureau and currently in charge of the distribution industry