Article 27Guidelines for Persons Who Intend to Hold Specific Personal Information Files
第二十七条（特定個人情報ファイルを保有しようとする者に対する指針）
The Commission, in order to ensure the proper handling of Specific Personal Information, is to establish and make public the guidelines (in the following paragraph and paragraph (3) of the following Article, referred to simply as "guidelines") specifying measures that a person who intends to hold Specific Personal Information Files must take, such as conducting by themselves a Specific Personal Information Protection Assessment (meaning an assessment of the risk of occurrence and impact of leakage of Specific Personal Information and other situations), preventing the occurrence of these situations, and other measures to properly manage Specific Personal Information.
委員会は、特定個人情報の適正な取扱いを確保するため、特定個人情報ファイルを保有しようとする者が、特定個人情報保護評価（特定個人情報の漏えいその他の事態の発生の危険性及び影響に関する評価をいう。）を自ら実施し、これらの事態の発生を抑止することその他特定個人情報を適切に管理するために講ずべき措置を定めた指針（次項及び次条第三項において単に「指針」という。）を作成し、公表するものとする。
The Commission, considering the technological progress and international trends related to the protection of Personal Information, is to reexamine the guidelines at least every three years, and, if it is found to be necessary, to change the guidelines.