Risk Communication Institute of Japan Releases Free White Paper on Data Leak Risks from Real-Time Posting SNS Apps

The Risk Communication Institute of Japan, a general incorporated association based in Minato-ku, Tokyo and led by Representative Director Haruko Osugi, announced the free release of a white paper titled “Practical Guide to Information Leakage Risks Caused by Real-Time Posting SNS Apps and Rebuilding Corporate Governance” on May 15, 2026. The document systematically summarizes corporate information leakage risks and countermeasures triggered by SNS apps such as BeReal. In April 2026, an employee of a major regional bank photographed the workplace using BeReal, causing customer names written on a whiteboard to be leaked. The post was viewed tens of millions of times on X, the parent company’s share price fell by about 3% in a single day, and the incident escalated to the point where Japan’s Financial Services Agency requested a report. In the same month, similar cases were reported across sectors including boards of education, restaurant chains, telecommunications companies, and manufacturers. The white paper is based on primary materials from public institutions and compiles measures companies can take immediately. Real-time posting SNS apps carry high risk because apps such as BeReal are designed around the behavior of “taking a photo before thinking.” Random notifications prompt reflexive responses even at work because users do not know when they will arrive. A two-minute posting window creates time pressure and leaves little room for risk assessment. Simultaneous front and rear camera capture means that while users intend to photograph themselves, confidential information in the background may also be recorded automatically. The misconception that posts “disappear” after 24 hours is undermined by screen recording, which can preserve content permanently. The sense of safety from sharing only with friends also lowers caution. Companies may assume that issuing a ban will solve the issue, but if the work environment does not change, incidents can recur even when use during working hours is prohibited. The white paper presents countermeasures based on design rather than reliance on bans. The white paper covers why the design of real-time posting SNS apps amplifies corporate damage; four principles common to public-sector guidance in the United Kingdom and the United States; redesigning SNS policies by listing prohibited targets as nouns; five analog measures to change workplace environments; information management in remote work settings; preparation for risks from past leaks; a six-step implementation roadmap; and ready-to-use practical templates such as internal notices and examples of additions to work rules. Representative Director Haruko Osugi commented that information leakage incidents related to real-time posting SNS apps such as BeReal share a structural problem that cannot be dismissed as the fault of young employees. Since app design pushes human judgment to a later stage, organizations need to prevent incidents by creating workplaces where people cannot take photos, sensitive information does not appear in photos, and employees can pause before acting. She expressed hope that the white paper will serve as a practical resource for staff dealing with these issues. Those who wish to receive the guide should apply through the dedicated form. After application, the document will be sent to the registered email address. Other methods cannot be accommodated. RCIJ is the only specialized institution in Japan that offers a curriculum focused on risk management in communication strategy, including strategic public relations. It brings together experts active on the front lines of various industries and provides comprehensive programs covering risk management through crisis communication. RCIJ also distributes a weekly podcast, “The Correct Answer to Online Firestorms,” every Thursday. The program explains widely discussed public backlash cases from the perspective of crisis communication professionals. In ten minutes once a week, listeners can broaden their knowledge of how to respond to online controversies and incidents, supporting the development of risk communication skills. When quoting, reproducing, or publishing the contents of the material, the source must be clearly stated as the Risk Communication Institute of Japan. Inquiries regarding this matter should be directed to the RCIJ secretariat.