If a leakage, loss or damage of Specific Personal Information recorded in a Specific Personal Information File or any other situation concerning ensuring the security of Specific Personal Information that is specified by Rules of the Personal Information Protection Commission as being highly likely to harm the rights and interests of individuals has occurred, a Person in Charge of a Process Using an Individual Number, etc. must report to the Commission that the situation has occurred, pursuant to the provisions of Rules of the Personal Information Protection Commission. This does not apply, however, if said Person in Charge of a Process Using an Individual Number, etc. has been entrusted with all or part of said Process Using an Individual Number, etc. by another Person in Charge of a Process Using an Individual Number, etc. and has notified that other Person in Charge of a Process Using an Individual Number, etc. that the situation has occurred, pursuant to the provisions of Rules of the Personal Information Protection Commission.
個人番号利用事務等実施者は、特定個人情報ファイルに記録された特定個人情報の漏えい、滅失、毀損その他の特定個人情報の安全の確保に係る事態であって個人の権利利益を害するおそれが大きいものとして個人情報保護委員会規則で定めるものが生じたときは、個人情報保護委員会規則で定めるところにより、当該事態が生じた旨を委員会に報告しなければならない。ただし、当該個人番号利用事務等実施者が、他の個人番号利用事務等実施者から当該個人番号利用事務等の全部又は一部の委託を受けた場合であって、個人情報保護委員会規則で定めるところにより、当該事態が生じた旨を当該他の個人番号利用事務等実施者に通知したときは、この限りでない。
In the case provided for in the preceding paragraph, a Person in Charge of a Process Using an Individual Number, etc. (excluding a person who has given notice under the proviso to that paragraph) must notify the person themselves that the situation has occurred, pursuant to the provisions of Rules of the Personal Information Protection Commission. This does not apply, however, if it is difficult to notify the person themselves and the Person in Charge of a Process Using an Individual Number, etc. takes alternative measures necessary to protect the rights and interests of the person themselves.
前項に規定する場合には、個人番号利用事務等実施者（同項ただし書の規定による通知をした者を除く。）は、本人に対し、個人情報保護委員会規則で定めるところにより、当該事態が生じた旨を通知しなければならない。ただし、本人への通知が困難な場合であって、本人の権利利益を保護するため必要なこれに代わるべき措置をとるときは、この限りでない。