10 problems that "Rakuten" is holding up Summary

【Caution】 Since this article is the continuation of the following series of articles, that is, the third one, please read the third article after reading both of the following two articles exactly for the unread two people first .

· First one
Rakuten from personal information leaks to spammers, or begins to reach the e-mail address where spammers with real names are used only at Rakuten - GIGAZINE

· Second one
Rakuten, personal information including user's e-mail address was downloaded and sold as "1 case 10 yen" - GIGAZINE

~ The scoop of this 3rd article ~
■ Problem point Part 1Real name entered spam mail reaches the e-mail address used only in Rakuten Ichiba"

Problem # 2 "Rakuten announced that it would not show the customer's email address / credit card number to the store side"

■ Problem 3:Rakuten Ichiba store can see the customer's email address written in the order confirmation email"

■ Problem 4:Rakuten Ichiba store can see customer's email address from the screen where customer information was searched"

Problem # 5 "Rakuten Ichiba stores can see the customer's email address by using the CSV data download service if you go through the review"

Problem # 6 "The CSV data download service is charged, but customers have not received explanations"

■ Issue No. 7 "Rakuten does not guarantee that each shop adheres to the Personal Information Protection Law and leaves the possibility of e-mail addresses leaking from each store"

■ Problem 8:The customer's credit card number is crossed to some of the Rakuten Ichiba stores"

Problem # 9Rakuten announced that he would not show the customer's email address or credit card number to the store, but in reality it is not so, contradictory"

■ Issue No. 10 "I do not explain where these facts are "absolutely wrong facts""

Details are as below.
■ Issue No. 1 "Real name entered spam mail reaches the e-mail address used only in Rakuten Ichiba"


As for this matter, the first article "From the Rakuten Ichiba, personal information will leak to spammers, or spam mailed with real names will start reaching e-mail addresses that are used only by Rakuten"It is written only in detail, so there is no other choice than to have it read from the top down to the bottom right.

If you are experienced in GIGAZINE readers in the above article, "If you are experiencing spam mails with real names on e-mail addresses that are used only on Rakuten Ichiba", as a result of asking you to provide information, quite a lot Successfully gathered examples of. Although it is the original correspondence to give thanks to everyone who provided information, it is too much, so I would like to say thank you on this occasion.

Since I asked the spammer to disclose the name of the shop that I used, when I gave the information, I thought that it would be possible to identify the shop that was the source of the leaked mail address list We have not reached where we narrow down completely. However, since I know that there are cases that "this store is 99.9% because it uses only this store", it may be possible to identify the source of information leakage.

When you restore the story, the question in the midst of writing this first article is raised, leading to the second article.

"In the Rakuten Ichiba, it is supposed to be a mechanism that does not know the ordering customer's email address to the store side, why does the store know the ordering customer's email address?"

■ Problem 2 Part 2 "Rakuten announced that it would not show the customer's email address and credit card number to the store side"


In July 2005 "Risk of personal information related to transactions at Rakuten Ichiba StoreIn response to the incident, Rakuten will announce the following countermeasures.

· August 1, 2005
"Card number and e-mail address will not be put into stores", Rakuten measures - News - nikkei BPnet


In this article, "Also, we will introduce a system that makes it possible for a merchant store to conceal e-mail addresses of users in September.As a result of these system measures, Also, it will prevent information leakage via franchise stores ".

Rakuten is certainly announced as follows on the official website.

· August 1, 2005
About the outflow of personal information concerning dealings in Rakuten Ichiba Store 【Future Measures】


In this announcement Rakuten is Chairman and President of Representative Director "Hiroshi Mikkya"Mr. Mr. Mr. Mr. Mr."With this, as for dealings with Rakuten from now on, credit card number and e-mail address of personal information can not be seen at store sideIt is clearly stated. From the place where Mikiya president himself takes command of the countermeasure, he / she can understand that serious condition.

The content of countermeasures is also specified on another page.

· August 1, 2005
~ Toward creation of safe · secure Rakuten Ichiba ~


Even in this page "With this, as for dealings with Rakuten from now on, credit card number and e-mail address of personal information can not be seen at store sideIt is written.

Also,"In order to reduce the possibility of leakage of personal information as much as possible, switch to a service that does not provide personal information (e-mail address and credit card number) not necessary for "delivery of goods" to each storeIt is written.

As far as we are looking at the information so far, there is no way either the email address or the credit card number can pass to the shop using Rakuten Ichiba. Even so you should be able to use Rakuten Izaki with peace of mind.

However, these are all story of August 2005. According to the report of nikkei BPnet "We will also introduce a system that makes it possible for users to hide their e-mail addresses to merchants in September as medalsAnd Rakuten will also be on the official website "Of personal information, credit card number and e-mail address can not be seen on store sideI write it.

The items decided at this point are listed as follows.

· Hide Rakuten's email address from the store side
· Hide Rakuten's credit card number to store side
· Do the medal with September 2005

In other words, it was supposed to be hidden with respect to two types of mail address and credit card number with Medo as September 2005.

Here again, the first article "From the Rakuten Ichiba, personal information will leak to spammers, or spam mailed with real names will start reaching e-mail addresses that are used only by RakutenPlease remember that this survey departed from. First of all, we will chase the problem of "mail address" out of two problems such as "credit card number" and "mail address". I will mention the issue of "credit card number" further later.

@ IT reports on how to actually hide the mail address in the following article.

· 2005/8/2
@ IT: 【Special issue】 Rakuten · President Mikigaya announces card outflow countermeasures, can you understand the store


In this article, "We plan to introduce a new system" mail forwarding function "on September 1, which will make the customer's e-mail address invisible when the store issues Pierard's e-mail magazine to customers. That is, when sending mail magazines, the mail address is hidden.

This non-display process is not displayed even when sending e-mail magazines, but also on the screen managing customer information of Rakuten customers who ordered to the shop side.

However, this measure was incomplete and three loopholes were left. Rakuten Ichiba's store side still has a way to see the customers' email addresses ordered at their store.

· Method 1: See customer's e-mail address written in the order confirmation e-mail
· Method 2: View e-mail address from the screen where customer information was searched
· Method 3: Using the "CSV data download service" to view customer's email address

For each of these, GIGAZINE'sSecond articleBut I am writing.

■ Problem 3 Part 3 "Rakuten Ichiba stores can see the customer's email address written in the order confirmation email"

Order confirmation e-mails that are automatically sent to customers are also broadcasted to the store and are as follows.

From: Rakuten Ichiba
To: Customer's email address
CC: store's mail address

This is an actual example when I ordered on the Rakuten market. If you have e-shopping using Rakuten Ichiba, you can quickly check the subject by looking at the e-mail "【Rakuten Market】 Order Details Confirmation (Automatic Delivery Mail)".


As you can see, this store is also sent to the store by CC, so Rakuten Ichiba stores can see the email address of customers ordered at their store.

According to the report of nikkei BPnet "We will also introduce a system that makes it possible for users to hide their e-mail addresses to merchants in September as medals"Rakuten also official website"Of personal information, credit card number and e-mail address can not be seen on store sideAlthough it writes, it is possible to actually see the mail address of the customer who ordered at the store.

Rakuten is writing that "E-mail address can not be seen on the store side", in fact it is still problematic that the mail address was made to be viewable at the store even now.

■ Problem 4: "Rakuten Ichiba stores can see the customer's email address from the screen that searched for customer information"

E-mail address and credit card information are hidden on ordered information page when shipping processing normally.

This is an actual screenshot offered by the administrator of the store which opens in the Rakuten market. The mail address has been turned down and can not be seen. Credit card information is also being hidden and can not be seen.


However, on the screen where you normally searched for customer information, you can see the e-mail address.


Again, according to nikkei BPnet "We will also introduce a system that makes it possible for users to hide their e-mail addresses to merchants in September as medals"Rakuten also official website"Of personal information, credit card number and e-mail address can not be seen on store sideAlthough it writes, it is possible to actually see the mail address of the customer who ordered at the store.

Rakuten is writing that "E-mail address can not be seen on the store side", in fact it is still problematic that the mail address was made to be viewable at the store even now.

■ Problem 5: "Rakuten Ichiba stores can see the customer's email address by using the CSV data download service if you go through the review"


For more information on this matterSecond articleIt is detailed in detail, and it is briefly summarized as follows two points.

· Hide email addresses in CSV data download service
· However, in the case of shops that meet the standard after Rakuten's review, the mail address is displayed

This also means INTERNET WatchThis articleamong"Also, regarding Rakuten's screening and providing the user's e-mail address, "Rakuten will offer in case it is judged to be a good reason in accordance with the personal information protection policy" And comments. However, Rakuten's "legitimate reason" is confidential because it is confident that it can not be revealed"We report Rakuten's comment and so on.

In other words, Rakuten will visit the official website "Of personal information, credit card number and e-mail address can not be seen on store sideIn fact, it is possible to see the e-mail address of customers who ordered at their store. "Only shops that passed the screening", but detailed examination criteria are unknown, and it is not announced which shop in the Rakuten market is going to be judged.

Also, this CSV data download service is not targeted only to "customers actually ordered at their own stores", but the following six are included in all actions taken at their own stores.

· Normal purchase data
· Group purchasing data
· Auction data (only bidders)
· Present data (Winner only)
· Document request data
· Product inquiry data


By using the CSV data download service, if you go through the review, you can see the customer's email address from these six data.

■ Problem 6: "The CSV data download service is charged, but the customer has not received the explanation"

"Rakuten Ichiba store can see the customer's email address written in the order confirmation email", "Rakuten Ichiba store can see the customer's email address from the screen that searched for customer information" 2 For one, no extra fee will be incurred when the store runs these methods, and it can be executed free of charge.

However, to use the CSV data download service fee will be charged.

Basic usage fee (monthly): Up to 100 items 1000 yen
More than 100 cases: 10 yen per case


Here, let's think about the "Personal Information Protection Act". Cabinet Office 's National Life Policy website contains "Frequently asked questions and answers on the Personal Information Protection ActThere is a thing called, I will look here.


First, the mail address included in this CSV data download service is "If there is a list that includes the name of an individual and the mail address is included as one of the items, the list corresponds to the whole information, and the mail address corresponds to the personal information as a part thereofBecause there is,E-mail address is personal informationIt is understood that it is.

Next, it is important whether customers who used Rakuten's shops knew about this charged service that downloads and provides CSV data including e-mail address which is personal information.

According to the Personal Information Protection Law, businesses handling personal information are said to "identify as much as possible" the purpose of using personal information. ConcretelyHow to identify to what extentThen, ""To identify as much as possible" means that personal information handling companies can have a clear understanding of the purpose for which personal information is to be used, and for individuals of personal information, The purpose is to be able to predict how information will be handledIt is written that "and continuing"Therefore, it is desirable that the purpose of use specified is as concrete as possible and easy to understand for himself, for example, a comprehensive purpose of use such as "to improve customer service" is clearly defined It is understood that it can not be said to have been made toThere is.

That is,The use purpose of the e-mail address which is personal information is specified as concrete as possible and it must be shown clearly to the principalThat's why.

Rakuten established and enforced on April 1, 2005 "Personal Information Protection Policy" "5. Handling of personal information, etc."It is written as follows.

If the customer applies to the service provider for reservation / bidding / purchase of goods or services, applications such as gifts or gifts or other transactions, the customer shall provide the personal data of the customer to the extent necessary for the transaction We will provide it. Personal data provided in this manner will be managed by the service provider. In addition to carrying out the transaction, the service provider provides information by the e-mail magazine for customers after the transaction, analyzes the purchase by the customer, and improves the business management of the service provider, the personal data (Excluding the destination information of the other person specified by the customer) will be used. The Group obligates service providers to comply with the Personal Information Protection Law and to handle personal information that takes into account the privacy of customers by contracts. However, it does not guarantee that the service provider will comply with it. Please contact the service provider for details.

"In the event that the customer has applied for reservation, bidding, purchase, purchase of a product or service, application such as present, other transactions, etc. to the service provider, we provide the customer's personal data to the service provider to the extent necessary for that transaction I will understand if it is "CSV data download service" by looking at the history so far, but without reading this article of GIGAZINE, Rakuten's "Privacy policyCan you say that it is concrete and as easy to understand for yourself as possible, just on the page of?

In addition, the specific fact that a service that provides a list of personal information data including a mail address as personal information at a fee is Rakuten's "Privacy policyDo you understand it only by the page?

Both of GIGAZINE's "Second article"It is only by understanding this article you are reading right now, it is understanding, general Rakuten users who have not read the second article and this third article and do not know"Privacy policyCan you read the page of "Can you see the purpose of using these?

"For example, a comprehensive use purpose such as "to improve customer service" is not understood as clearly explaining the purpose of use"The Cabinet Office explained as an example, is not Rakuten's explanation insufficient?

GIGAZINE's "Second article"Until the coming out on the net, the following information should be how to use personal information that only part of Rakuten officials and Rakuten store openers do not know.

Basic usage fee (monthly): Up to 100 items 1000 yen
More than 100 cases: 10 yen per case

CSV data download service is charged, but since the customer does not receive any explanation of it, is not it a problem when thinking based on the Personal Information Protection Law?
■ Issue No. 7 "Rakuten does not guarantee that each store will observe the Personal Information Protection Act, and Rakuten does not guarantee that e-mail addresses will leak from each store"

By the way, Rakuten established and enforced on April 1, 2005 "Personal Information Protection Policy" "5. Handling of personal information, etc.Let's see again.

If the customer applies to the service provider for reservation / bidding / purchase of goods or services, applications such as gifts or gifts or other transactions, the customer shall provide the personal data of the customer to the extent necessary for the transaction We will provide it. Personal data provided in this manner will be managed by the service provider. In addition to carrying out the transaction, the service provider provides information by the e-mail magazine for customers after the transaction, analyzes the purchase by the customer, and improves the business management of the service provider, the personal data (Excluding the destination information of the other person specified by the customer) will be used. The Group obligates service providers to comply with the Personal Information Protection Law and to handle personal information that takes into account the privacy of customers by contracts. However, it does not guarantee that the service provider will comply with it. Please contact the service provider for details.

It is hard to understand, so let's organize it. You can see that personal information is shared considerably widely.

· "The Group" means the following 16 companies
Rakuten Co., Ltd.
2. Rakuten Enterprise Co., Ltd.
3. Signature Japan Co., Ltd.
4. Target Co., Ltd.
5. Showtime Corporation
6. Everyone's Employment Co., Ltd.
7. Rakuten Travel Co., Ltd.
8. Rakuten baseball team
9. Fine wine Co., Ltd.
10. Sideby Network Co., Ltd.
11. Rakuten Sports Properties Co., Ltd.
12. Rakuten Bus Service Co., Ltd.
13. Rakuten Auction Co., Ltd.
14. Horse race Mall Co., Ltd.
15. Rakuten · Fast · Mobile Search Co., Ltd.
16. Rakuten Photograph Kan Co., Ltd.

· "Service Provider" means each store that opens in the Rakuten Market
Specifically, it refers to "a person who provides goods or services targeted for trading, such as shops, auction exhibitors, accommodation facilities or their agents, affiliated golf courses, etc." Also, the shop is about each store that opens in the Rakuten market.

In consideration of these two points, "Personal Information Protection Policy" "5. Handling of personal information, etc."It is as follows.

· Personal information will be provided to each store that opens in Rakuten Ichiba

Rakuten is "However, it does not guarantee that the service provider will comply with itBecause it wrote "It is like the following.

Rakuten does not guarantee that each store will observe the Personal Information Protection Act


In other words, even if the e-mail address goes to each shop, we can not take responsibility until each shop properly uses that e-mail address. It is correct as a theory and this policy itself does not violate the Personal Information Protection Act. But there are problems.

In order to clarify the seventh problem, the problem "from No. 2" to "No. 6" is rearranged again, it becomes as follows.

"Rakuten announced that he would not show the customer's email address or credit card number to the store side"

"Rakuten Ichiba stores can see the customer's email address written in the order confirmation email"

"Rakuten Ichiba store can see the customer's email address from the screen where customer information was searched"

"Rakuten Ichiba stores will be able to see the customer's email address using the CSV data download service if they go through the examination."

"The CSV data download service is charged, but customers have not received explanations of it"

in short,Rakuten writes when the e-mail address can not be seen at the store side, while the store side can actually see the e-mail address, and even Rakuten can see the e-mail address by Rakuten itself For a fee, and furthermore it can not be guaranteed what the mail address or list of e-mail addresses will beIt is equal to saying.

Let's see the first problem where many people actually suffering here are frequent.

"Real name entered spam mail reaches the e-mail address used only on Rakuten Ichiba"

"Rakuten does not guarantee that each shop adheres to the Personal Information Protection Law and leaves the possibility of e-mail addresses leaking from each store"Is not it a problem to say that?

Let's see the issue of credit card number from here.

■ Issue No. 8 "Customer's credit card number is crossed to some of Rakuten Ichiba stores"

Rakuten is official website "Of personal information, credit card number and e-mail address can not be seen on store sideI write it. Is it really that you can not see Rakuten Ichiba stores about credit card numbers?

First of all, let's take a look at "R-Backoffice order management" in the Rakuten Ichiba store system called RMS. The credit card number is not displayed properly here, and the credit card information is not crossed to the shop side.


next,Interesting writing done at Slashdot JapanAccording to the Rakuten Ichiba "Joshin Web rakuten storeIn "Our shop accepts credit card number disclosure exceptionally from Rakuten Co., Ltd., we are doing our own settlement processing"It is clearly written.


In fact, I tried asking "Joshin Web rakuten shop" by telephone, "As of May 29, 2009, Rakuten received disclosure of credit card number from Rakuten Co., Ltd., and is doing its own settlement processingI was able to obtain the answer that the purpose is to have it.

Rakuten is official website in 2005 "Of personal information, credit card number and e-mail address can not be seen on store sideDespite the fact that it was written as "2009", it is not yet possible to fully realize the mechanism.

Rakuten will also visit the official website on September 16, 2005 "We will promote system development that customers can use with confidence and hide all store credit card information while proceeding with consultation with the store by February 2006Although it writes as "When will it come out, will this" exception "disappear? If it is "exception" it is judged that no matter what you do? Are these series of facts "problematic" not?

■ Problem 9th "Rakuten announced that it would not show the customer's email address or credit card number to the store side, but in fact it is not so, it is inconsistent"

Rakuten announced that the customer's e-mail address / credit card number will not be shown to the store side, but I can actually see it, although I think that it is obvious if you read so far.

· The store side knows the e-mail address of the customer himself ordered at his store
(But, in reality, Rakuten is not allowed to show the e-mail address to the store)

· The store side can see the customer's email address from the screen where customer information was searched
(But, in reality, Rakuten is not allowed to show the e-mail address to the store)

· Rakuten is paid a list including its own customer's mail address of each store
(You can not buy another store list, but Rakuten will not show your e-mail address to the store in the first place)

· Rakuten will not take responsibility regardless of how each store uses personal information list including e-mail address
(If it does not take responsibility even if it leaks out and is used for spam mail, you should not leave the possibility of spilling out)

· The customer's credit card number is exceptionally given to some stores
(But, in fact, Rakuten should not give credit card number to the store)

In other words, there is too much difference between what you are standing upright and what you actually do behind the scenes, which is inconsistent.

Omrrrrrrrrrrrt: Announced that they will not show their own e-mail address / credit card number on the store side
Backside: Some of our customers' e-mail addresses / credit card numbers are still showing in stores

It is completely contradictory and it is not a fundamental Rakuten problem that we have left these problems so far until now.

■ Issue No. 10 "I do not explain where these facts are" absolutely wrong facts "

Because it does not mean directly to GIGAZINE, it is completely unknown whether it is GIGAZINE, but according to Rakuten all these facts are "False facts altogetherThat's right.

May 28, 2009
【Notice】 About partial misperception of information posted by blog

Thank you very much for using Rakuten Ichiba from every day.

Yesterday 27th, some blog posted "Rakuten, personal information including user's email address downloaded at 10 yen per case", but since it is totally misleading facts, I will do.

Since we have laid a thorough management system with regard to the handling of personal information, we are looking forward to shopping with confidence in the future.

On the Rakuten side saying "It is totally wrong facts", you can predict as many excuses as you want.

Excuse 1:
"I wrote that I do not show the customer's email address / credit card number on the store side, but I did not promise to surely run by what day and month what time I will not declare it at all. We just said that it is a med, so if you do measures in the future, there will be no problem. "

Excuse 2:
"It does not show the customer's email address unconditionally to the store side, it shows it only to the shops that have passed the examination, but the content of the examination is trade secret and I can not tell it"

Excuse 3:
"I do not show the credit card number to the store side, there are cases where it is exceptionally exclusively, basically it does not show any problems to the store side"

Excuse 4:
"It is not a violation of the Personal Information Protection Law to provide personal information of own customers, but it says that it sold 10 songs at a price of 10 yen but it did not sell it to other stores, but to the information ordered at the store It only provides data in the form of processing and downloading it, it is only receiving data processing fee, so to speak system usage fee It is said that data can be downloaded Download sales I can not say "

Excuse 5:
Also is said to have received a spam e-mail to e-mail addresses that are not used only in the "Rakuten market, the store is to how to use the mail address of the customer optimism does not take the responsibility. Also, really the e-mail address only whether using Rakuten market can not be confirmed. perhaps something of spyware and malware, Trojan horses, such as personal computers have been infected with a virus, it may be that e-mail address you are using was being exploited. it may only such to be being sent to randomly generated addresses. the first place as a mail address undeniable possibility that the leakage from the provider. each store anyway, which provides the e-mail address, at least optimism is personal has laid the management system of all possible measures with respect to the handling of information, it can be used with confidence in the future. While teaching properly for the store, because do not know to what stores are dealing with how personal information, responsibility is not taken. "

In fact, as a response to the first article, Rakuten exclusive e-mail address is used, only one particular shop is used, and spam mail arrives soon after using that particular shop There is an example, the GIGAZINE reader seems to inform Rakuten for that. However, the response from Rakuten was as follows.

Thank you for using Rakuten Market on a daily basis.

This time, you will receive inquiries to Rakuten Market,
We are sorry for troubling you.

First of all, for details of the e-mail that the customer is receiving
I can not give you an appropriate answer because there is a part that I do not know
There is a possibility, please understand humbly.

Sorry to blame you, Regardless of the e-mail being sent from outside the Rakuten Market,
Because we can not understand its distribution route etc, we can not deal with it,
Thank you for your understanding.

Among unsolicited advertisements and the like, the mail address of the transmission destination
There are things like arranging alphabets etc randomly and sending them.

One of the randomly set mail addresses,
It may be possible that it corresponded to your email address.

If you receive spam e-mailed to our service, please fully confirm it,
In case of uncertainty please discard it.

In addition, when you use Rakuten customer information, Rakuten's personal information protection policy
We strictly manage it based on it and use it within the range of "purpose of use".

As we have not confirmed the fact that your personal information has leaked out now,
Thank you for your understanding.

Rakuten's personal information protection policy
http://privacy.rakuten.co.jp/

In addition, as spam mails are flooded in recent years,
If you are uneasy, please contact a public institution such as a consumer center, high-tech police
We will consider consulting you.

At this time, I am sorry that the range that I can help with is limited.

Please continue to patronize Rakuten Ichiba Market.

Although it may not be particularly wrong as correspondence,Rakuten exclusive e-mail address was used, and only one particular shop was used, and spam mail came to be received as soon as using that particular shopIt is a reply mail to the case. Is not it too too mechanically responsive? If you investigate more carefully, you should be able to truly be able to identify the shop illegally using the e-mail address.

By the way, the solution of each problem is extremely simple.

■ Issue No. 1 "Real name entered spam mail reaches the e-mail address used only in Rakuten Ichiba"
↓
Investigate spam mail reporting, locate the source of the spam mail, and identify where the spam was spilled. As a result there is no problem if it is not Rakuten Market. In the unlikely event that any of the shops in the Rakuten Ichiba was the source of the spill, it should be properly disposed of and released to the public.

■ Problem 2 Part 2 "Rakuten announced that it would not show the customer's email address and credit card number to the store side"
↓
Again, "Rakuten will not show the customer's email address / credit card number to the shop side" and clearly indicate how far it will be completed. Also, when it can be completed, it announces it on the net.

■ Problem 3 Part 3 "Rakuten Ichiba stores can see the customer's email address written in the order confirmation email"
↓
Make the system not seen.

■ Problem 4: "Rakuten Ichiba stores can see the customer's email address from the screen that searched for customer information"
↓
Make the system not seen.

■ Problem 5: "Rakuten Ichiba stores can see the customer's email address by using the CSV data download service if you go through the review"
↓
Make sure not to include the mail address in the CSV data download service

■ Problem 6: "The CSV data download service is charged, but the customer has not received the explanation"
↓
Rakuten will explain it on the official website and also specify on the page of personal information protection concretely

■ Issue No. 7 "Rakuten does not guarantee that each store will observe the Personal Information Protection Act, and Rakuten does not guarantee that e-mail addresses will leak from each store"
↓
If you execute the solution so far, you can not say that you are left unattended

■ Issue No. 8 "Customer's credit card number is crossed to some of Rakuten Ichiba stores"
↓
Ban exception handling no matter how big store it is

■ Problem 9th "Although Rakuten announced that he would not show the customer's email address / credit card number to the store side, he could actually see it and it was inconsistent."
↓
An announcement to apologize for contradiction was made on Rakuten's official website and we announced measures for the future. Separate the deadline for how long it will be completed for countermeasures. If it is not completed by the deadline, again delimit the time limit and announce it in the same way.

■ Issue No. 10 "I do not explain where these facts are" absolutely wrong facts "
↓
Since I am applying for an interview from Rakuten from GIGAZINE, please explain what it is "misleading facts" by receiving it. The content of the interview will be posted as an article. Rakuten is not to judge whether it is "a totally misleading fact", but Rakuten users who read the interview should judge. GIGAZINE and Rakuten should guarantee the accuracy of the contents of the interview article mutually.

Perhaps it is expected that Rakuten himself / herself is doing "totally fact misunderstanding" regardless of the series of facts thought.

Therefore, as it is literally, as Rakuten's "misidentification of facts" becomes, I am applying for interview with Rakuten. Whether it is refused or accepted, the result will be posted as a further report so please wait for a while.

In addition, I would like to thank GIGAZINE to many people who provided various information about the inner circumstances of Rakuten, the actual situation of each store in the Rakuten market, the contents and problems of the actual system, and so on. In addition to the current case, we will continue to conduct additional long-term interviews in the future, as new facts are discovered, as soon as it can be stated that they are facts, they will be posted sequentially. Moreover, we will strictly adhere to the confidentiality of news gathering sources. Thank you very much for your cooperation.

Finally, GIGAZINE is supporting Rakuten with full power. Good luck.