Silviase/jgov_v1.4_full_ann huggingface dataset:
## computers

(ii) those character, letter, number, symbol or other codes which are assigned in regard to the use of services provided to an individual or to the purchase of goods sold to an individual, or which are stated or electromagnetically recorded in a card or other document issued to an individual so as to be able to identify a specific user or purchaser, or recipient of issuance by having made the said codes differently assigned or, stated or recoded for the said user or purchaser, or recipient of issuance

(3) “Special care-required personal information” in this Act means personal information comprising a principal's race, creed, social status, medical history, criminal record, fact of having suffered damage by a crime, or other descriptions etc. prescribed by cabinet order as those of which the handling requires special care so as not to cause unfair discrimination, prejudice or other disadvantages to the principal.

(4) A “personal information database etc.” in this Act means those set forth in the following which are a collective body of information comprising personal information (excluding those prescribed by cabinet order as having little possibility of harming an individual’s rights and interests considering their utilization method).

(i) those systematically organized so as to be able to search for particular personal information using a computer;

(ii) besides those set forth in the preceding item, those prescribed by cabinet order as having been systematically organized so as to be able to easily search for particular personal information.

(5) A "personal information handling business operator" in this Act means a person providing a personal information database etc. for use in business; however, excluding a person set forth in the following;

(i) a central government organization;

(ii) a local government;

(iii) an incorporated administrative agency etc. (meaning an independent administrative agency etc. prescribed in Article 2, paragraph (1) of the Act on the Protection of Personal Information Held by Incorporated Administrative Agencies (Act No. 59 of 2003); hereinafter the same);
(iv) a local incorporated administrative agency (meaning a local incorporated administrative agency prescribed in Article 2, paragraph (1) of the Local Incorporated Administrative Agencies Act (Act No. 118 of 2003); hereinafter the same);

(6) “Personal data” in this Act means personal information constituting a personal information database etc.

(7) “Retained personal data” in this Act means personal data which a personal information handling business operator has the authority to disclose, correct, add or delete the contents of, cease the utilization of, erase, and cease the third-party provision of, and which shall be neither those prescribed by cabinet order as likely to harm the public or other interests if their presence or absence is made known nor those set to be deleted within a period of no longer than one year that is prescribed by cabinet order.

(8) A “principal” in relation to personal information in this Act means a specific individual identifiable by personal information.

(9) “Anonymously processed information” in this Act means information relating to an individual that can be produced from processing personal information so as neither to be able to identify a specific individual by taking action prescribed in each following item in accordance with the provisions of personal information set forth in each said item nor to be able to restore the personal information.

(i) personal information falling under paragraph (1), idem (i);

Deleting a part of descriptions etc. contained in the said personal information (including replacing the said part of descriptions etc. with other descriptions etc. using a method with no regularity that can restore the said part of descriptions etc.)

(ii) personal information falling under paragraph (1), item (ii);

Deleting all individual identification codes contained in the said personal information (including replacing the said individual identification codes with other descriptions etc. using a method with no regularity that can restore the said personal identification codes)

(10) An “anonymously processed information handling business operator” in this Act means a person who provides for use in business a collective body of information comprising anonymously processed information which has been systematically organized so as to be able to search using a computer
for specific anonymously processed information or similar others prescribed by cabinet order as systematically organized so as to be able to search easily for specific anonymously processed information (referred to as an “anonymously processed information database etc.” in Article 36, paragraph (1)). However, a person set forth in each item of paragraph (5) is excluded.

(Overall Vision)

Article 3 Personal information, considering it should be carefully handled under the vision of respecting the personality of an individual, shall be made subject to proper handling.

### Chapter II Responsibilities etc. of the Central and Local Governments

(Responsibilities of the Central Government)

Article 4 The central government shall have the responsibilities for comprehensively developing and implementing necessary measures to ensure the proper handling of personal information in conformity with the purport of this Act.

(Responsibilities of the Local Governments)

Article 5 The local governments shall have the responsibilities for developing and implementing necessary measures to ensure the proper handling of personal information based on the characteristics of their local area in conformity with the purport of this Act.

(Legislative Action etc.)

Article 6 The government shall, considering the nature and utilization method of personal information, take necessary legislative and other action so as to be able to take discreet action for protecting personal information that especially requires ensuring the strict implementation of its proper handling in order to seek enhanced protection of an individual’s rights and interests, and shall take necessary action in collaboration with the governments in other countries to construct an internationally conformable system concerning personal information through fostering cooperation with an international organization and other international framework.
### Chapter III Measures etc. for the Protection of Personal Information

## Section 1 Basic Policy on the Protection of Personal Information

## Article 7

(1) The government shall establish a basic policy on the protection of personal information (hereinafter referred to as a “basic policy”) in order to seek to comprehensively and integrally promote measures concerning the protection of personal information.

(2) A basic policy shall prescribe those matters set forth in the following.

(i) a basic direction for promoting measures concerning the protection of personal information

(ii) a matter concerning action to be taken by the central government for the protection of personal information

(iii) a basic matter concerning action to be taken by a local government for the protection of personal information

(iv) a basic matter concerning action to be taken by an incorporated administrative agency etc. for the protection of personal information

(v) a basic matter concerning action to be taken by a local incorporated administrative agency for the protection of personal information

(vi) a basic matter concerning action to be taken by a personal information handling business operator, an anonymously processed information handling business operator and an accredited personal information protection organization prescribed in Article 50, paragraph (1) for the protection of personal information

(vii) a matter concerning dealing smoothly with a complaint about the handling of personal information

(viii) other important matters concerning promoting measures for the protection of personal information.

(3) The Prime Minister shall call for a cabinet decision on a basic policy developed by the Personal Information Protection Commission.
(4) The Prime Minister shall, when a cabinet decision was made pursuant to the provisions of the preceding paragraph, disclose a basic policy to the public without delay.

(5) The provisions under the preceding two paragraphs shall apply mutatis mutandis when altering a basic policy.

## Section 2 Measures by the Central Government

(Support to a Local Government etc.)

Article 8 The central government shall provide information, develop guidelines to ensure the proper and effective implementation of action to be taken by a business operator etc., and take other necessary action in order to support measures for the protection of personal information developed or implemented by a local government and activities undertaken by a Japanese citizen, or a business operator etc. in relation to seeking the proper handling of personal information.

## (Action for Dealing with a Complaint)

Article 9 The central government shall take necessary action to seek the proper and prompt dealing of a complaint caused between a business operator and a principal about the handling of personal information.

(Action for Ensuring the Proper Handling of Personal Information)

Article 10 The central government shall, through the appropriate division of roles between a local government and itself, take necessary action prescribed in the succeeding Chapter in order to ensure the proper handling of personal information by a personal information handling business operator.

## Section 3 Measures by the Local Governments

(Protection of Personal Information Retained by a Local Government etc.)

Article 11

(1) A local government shall, considering the nature of personal information it retains, the purpose of retaining the personal information, and so on, strive to take necessary action so as to ensure the proper handling of the retained personal information.
(2) A local government shall, in response to the characteristics and business contents of a local incorporated administrative agency that it has established, strive to take necessary action so as to ensure the proper handling of personal information that the agency retains.

(Support to a Business Operator etc. in a Local Area)

Article 12 A local government shall, in order to ensure the proper handling of personal information, strive to take necessary action to support a business operator and a resident in a local area.

(Mediation etc. for Dealing with a Complaint)

Article 13 A local government shall, in order for a complaint caused between a business operator and a principal about the handling of personal information to be dealt with appropriately and promptly, strive to mediate dealing with the complaint and take other necessary action.

## Section 4 Cooperation between the Central and Local Governments

Article 14 The central and local governments shall cooperate with one another in implementing measures relating to the protection of personal information.

Chapter IV Obligations etc. of a Personal Information Handling Business Operator

## Section 1 Obligations of a Personal Information Handling Business Operator

(Specifying a Utilization Purpose)

Article 15

(1) A personal information handling business operator shall, in handling personal information, specify the purpose of utilizing the personal information (hereinafter referred to as a “utilization purpose”) as explicitly as possible.

(2) A personal information handling business operator shall, in case of altering a utilization purpose, not do so beyond the scope recognized reasonably relevant to the pre-altered utilization purpose.
(Restriction due to a Utilization Purpose)

## Article 16

(1) A personal information handling business operator shall not handle personal information without obtaining in advance a principal’s consent beyond the necessary scope to achieve a utilization purpose specified pursuant to the provisions under the preceding Article.

(2) A personal information handling business operator shall, in case of having acquired personal information accompanied with succeeding a business from another personal information handling business operator because of a merger or other reason, not handle the personal information without obtaining in advance a principal’s consent beyond the necessary scope to achieve the pre-succession utilization purpose of the said personal information.

(3) The provisions under the preceding two paragraphs shall not apply to those cases set forth in the following.

(i) cases based on laws and regulations

(ii) cases in which there is a need to protect a human life, body or fortune, and when it is difficult to obtain a principal’s consent

(iii) cases in which there is a special need to enhance public hygiene or promote fostering healthy children, and when it is difficult to obtain a principal’s consent

(iv) cases in which there is a need to cooperate in regard to a central government organization or a local government, or a person entrusted by them performing affairs prescribed by laws and regulations, and when there is a possibility that obtaining a principal’s consent would interfere with the performance of the said affairs

(Proper Acquisition)

Article 17

(1) A personal information handling business operator shall not acquire personal information by deceit or other improper means.
(2) A personal information handling business operator shall, except in those cases set forth in the following, not acquire special care-required personal information without obtaining in advance a principal’s consent.

(i) cases based on laws and regulations

(ii) cases in which there is a need to protect a human life, body or fortune, and when it is difficult to obtain a principal’s consent

(iii) cases in which there is a special need to enhance public hygiene or promote fostering healthy children, and when it is difficult to obtain a principal’s consent

(iv) cases in which there is a need to cooperate in regard to a central government organization or a local government, or a person entrusted by them performing affairs prescribed by laws and regulations, and when there is a possibility that obtaining a principal’s consent would interfere with the performance of the said affairs

(v) cases in which the said special care-required personal information is being open to the public by a principal, a government organization, a local government, a person set forth in each item of Article 76, paragraph (1) or other persons prescribed by rules of the Personal Information Protection Commission

(vi) other cases prescribed by cabinet order as equivalent to those cases set forth in each preceding item

(Notification etc. of a Utilization Purpose when Acquiring)

## Article 18

(1) A personal information handling business operator shall, in case of having acquired personal information except in cases where a utilization purpose has been disclosed in advance to the public, promptly inform a principal of, or disclose to the public, the utilization purpose.

(2) A personal information handling business operator shall, notwithstanding the provisions under the preceding paragraph, in cases where it acquires, accompanied by concluding a contract with a principal, the principal's personal information stated in a written contract or other document (including an electromagnetic record; hereinafter the same in this paragraph) or other similar cases where it acquires directly from a principal his or her personal information stated in a written document, state a utilization purpose
explicitly to the said principal. This, however, shall not apply in cases where there is an urgent need to protect a human life, body or fortune.

(3) A personal information handling business operator shall, in case of altering a utilization purpose, inform a principal of, or disclose to the public, a post-altered utilization purpose.

(4) The provisions of the preceding three paragraphs shall not apply in those cases set forth in the following.

(i) cases in which there is a possibility that informing a principal of, or disclosing to the public, a utilization purpose would harm a principal or third party’s life, body, fortune or other rights and interests

(ii) cases in which there is a possibility that informing a principal of, or disclosing to the public, a utilization purpose would harm the rights or legitimate interests of the said personal information handling business operator

(iii) cases in which there is a need to cooperate in regard to a central government organization or a local government performing affairs prescribed by laws and regulations, and when there is a possibility that informing a principal of, or disclosing to the public, a utilization purpose would interfere with the performance of the said affairs

(iv) cases in which it can be recognized, judging from the acquisitional circumstances, that a utilization purpose is clear

(Assurance etc. about the Accuracy of Data Contents)

Article 19 A personal information handling business operator shall strive to keep personal data accurate and up to date within the scope necessary to achieve a utilization purpose, and to delete the personal data without delay when such utilization has become unnecessary.

(Security Control Action)

Article 20 A personal information handling business operator shall take necessary and appropriate action for the security control of personal data including preventing the leakage, loss or damage of its handled personal data.
(Supervision over Employees)

Article 21 A personal information handling business operator shall, in having its employees handle personal data, exercise necessary and appropriate supervision over the employees so as to seek the security control of the personal data.

(Supervision over a Trustee)

Article 22 A personal information handling business operator shall, in case of entrusting a whole or part of the handling of personal data, exercise necessary and appropriate supervision over an entrusted person so as to seek the security control of the personal data of which the handling has been entrusted.

(Restriction on Third Party Provision)

Article 23

(1) A personal information handling business operator shall, except in those cases set forth in the following, not provide personal data to a third party without obtaining in advance a principal’s consent.

(i) cases based on laws and regulations

(ii) cases in which there is a need to protect a human life, body or fortune, and when it is difficult to obtain a principal’s consent

(iii) cases in which there is a special need to enhance public hygiene or promote fostering healthy children, and when it is difficult to obtain a principal’s consent

(iv) cases in which there is a need to cooperate in regard to a central government organization or a local government, or a person entrusted by them performing affairs prescribed by laws and regulations, and when there is a possibility that obtaining a principal’s consent would interfere with the performance of the said affairs

(2) A personal information handling business operator, in regard to personal data provided to a third party (excluding special care-required personal information; hereinafter the same in this paragraph), may, in cases where it is set to cease in response to a principal’s request a third-party provision of personal data that can identify the principal and when pursuant to rules of
the Personal Information Protection Commission it has in advance informed a principal of those matters set forth in the following or put them into a state where a principal can easily know, and notified them to the Personal Information Protection Commission, provide the said personal data to a third party notwithstanding the provisions of the preceding paragraph.

(i) to set a third-party provision as a utilization purpose

(ii) the categories of personal data provided to a third party

(iii) a method of a third-party provision

(iv) to cease, in response to a principal’s request, a third-party provision of personal data that can identify the principal

(v) a method of receiving a principal’s request

(3) A personal information handling business operator shall, in case of altering those matters set forth in item (ii), item (iii) or item (v) of the preceding paragraph, in advance inform a principal of the contents to be altered or put them into a state where a principal can easily know and notify them to the Personal Information Protection Commission pursuant to rules of the Personal Information Protection Commission.

(4) The Personal Information Protection Commission shall, when notified pursuant to paragraph (2), disclose to the public a matter relating to the notification pursuant to rules of the Personal Information Protection Commission. The same shall apply when notified pursuant to the preceding paragraph.

(5) In those cases set forth in the following, a person receiving the provision of the said personal data shall not fall under a third party in regard to applying the provisions of each preceding paragraph.

(i) cases in which personal data is provided accompanied by a personal information handling business operator entrusting a whole or part of the handling of the personal data within the necessary scope to achieve a utilization purpose

(ii) cases in which personal data is provided accompanied with business succession caused by a merger or other reason

(iii) cases in which personal data to be jointly utilized by a specified person is
provided to the specified person, and when a principal has in advance been informed or a state has been in place where a principal can easily know to that effect as well as of the categories of the jointly utilized personal data, the scope of a jointly utilizing person, the utilization purpose for the utilizing person and the name or appellation of a person responsible for controlling the said personal data

(6) A personal information handling business operator shall, in case of altering a utilization purpose for a utilizing person or the name or appellation of a person responsible for controlling personal data prescribed in item (iii) of the preceding paragraph, in advance inform a principal of the contents to be altered or put them into a state where a principal can easily know.

(Restriction on Provision to a Third Party in a Foreign Country)

Article 24 A personal information handling business operator, except in those cases set forth in each item of the preceding Article, paragraph (1), shall, in case of providing personal data to a third party (excluding a person establishing a system conforming to standards prescribed by rules of the Personal Information Protection Commission as necessary for continuously taking action equivalent to the one that a personal information handling business operator shall take concerning the handling of personal data pursuant to the provisions of this Section; hereinafter the same in this Article) in a foreign country (meaning a country or region located outside the territory of Japan; hereinafter the same) (excluding those prescribed by rules of the Personal Information Protection Commission as a foreign country establishing a personal information protection system recognized to have equivalent standards to that in Japan in regard to the protection of an individual’s rights and interests; hereinafter the same in this Article), in advance obtain a principal’s consent to the effect that he or she approves the provision to a third party in a foreign country. In this case, the provisions of the preceding Article shall not apply.

(Keeping etc. of a Record on a Third-Party Provision)

## Article 25

(1) A personal information handling business operator shall, when having provided personal data to a third party (excluding a person set forth in each item of Article 2, paragraph (5); hereinafter the same in this Article and the succeeding Article), keep a record pursuant to rules of the Personal Information Protection Commission on the date of the personal data provision, the name or appellation of the third party, and other matters prescribed by rules of the Personal Information Protection Commission. This, however, shall not apply in cases where the personal data provision