Act on the Protection of Personal Information

The provisions of this Chapter (excluding Section 1; Article 66, paragraph (1) as applied mutatis mutandis in paragraph (2) of that Article (limited to the part relating to items (iv) and (v) (limited to the part relating to item (iv) of that paragraph)); Article 75; the preceding two Sections; paragraph (2) of the preceding Article; and Article 127), Article 176, Article 180179 (excluding the part relating to business prescribed in Article 66, paragraph (2), items (iv) and (v) (limited to the part relating to item (iv) of that paragraph)), and Article 181182 do not apply to the handling of personal information, pseudonymized personal information or information related to personal information by a person set forth in one of those items of Article 58, paragraph (2) in the business prescribed in those items.

In cases of the handling of personal information or anonymized personal information by a person set forth in one of the items of Article 58, paragraph (1), a person set forth in item (i) of that paragraph is deemed to be an incorporated administrative agency or other prescribed corporation; a person set forth in item (ii) of that paragraph is deemed to be a local incorporated administrative agency; and the provisions of Section 1, Article 75, the preceding two Sections, paragraph (2) of the preceding Article, Article 127, and the following Chapter through Chapter 8 (excluding Article 176, Article 180179 and Article 181182) apply.

A posting Service by publication is effected by taking measures to make a notice to the effect that the documents to be served will be delivered at any time to the person to be served is made available for inspection by a large number of unspecified persons by the method specified by Order of the Personal Information Protection Commission, and to post a document stating that effect on the notice board of the Commission or to make that effect service by publication, as displayed on the screen of a computer installed at the business office of the Commission, available for inspection.

Service by publication becomes effective once two weeks have elapsed since the date on which the postingmeasures under the preceding paragraph waswere commenced.

If an employee or former employee of an administrative entity, a person engaged in or formerly engaged in duties prescribed in the items of Article 66, paragraph (2) or in entrusted duties under Article 73, paragraph (5) or Article 121, paragraph (3), or a dispatched worker that is or was engaged in handling personal information, pseudonymized personal information or anonymized personal information in an administrative entity provides other persons with a personal information file (including a personal information file all or part of which has been reproduced or processed) relating to Article 60, paragraph (2), item (i) that contains confidential information on individuals without justifiable grounds, that person is subject to imprisonment for not more than twothree years or to a fine of not more than 1,000500,000 yen.

If an order under Article 148, paragraph (2) a business handling personal information (or its officer, representative or administrator if it is a corporation (including an organization without legal personality that has made provisions for a representative or manager; the same applies in Article 185, paragraph (3) is violated, the 1))), its employee, or a person who used to be that business or employee has committed provided or misappropriated a personal information database or the violation is equivalent (including a personal information database or the equivalent all or part of which has been reproduced or processed) that they handled in the course of their business for the purpose of seeking their own or a third party's illegal profits or of causing damage to the identifiable person or any other person, they are subject to imprisonment for not more than one yeartwo years or to a fine of not more than 1,000,000 yen.

If a business handling personal information (or its officer, representative or administrator if it is a corporation (includingperson prescribed in Article 176 provides other persons with or misappropriates personal information an organization without legal personalityadministrative entity holds that has made provisions for a representative or manager; the same applies in Article 184, paragraph (1))), its employee, or a person who used to be that business or employee has provided or misappropriated a personal information database oracquired in the equivalent (including a personal information database or the equivalent allcourse of their trade, for their own or part of which has been reproduceda third party's illegal profits or processed) that they handled infor the coursepurpose of their business forcausing damage to the purpose of seeking their ownidentifiable person or a third party's illegal profits, they are any other person, that person is subject to imprisonment for not more than one yeartwo years or to a fine of not more than 5001,000,000 yen.

If a person prescribed in Article 176 provides other persons with has acquired personal information, for the purpose of seeking their own or misappropriates a third party's illegal profits or for the purpose of causing damage to the identifiable person, a person holding the personal information or any other person, by an administrative entity holds that the act of deceiving, assaulting or intimidating a person has acquired , or by theft of or damage to property, intrusion into a facility, interception of wire telecommunications, an act of unauthorized computer access (meaning an act of unauthorized computer access prescribed in Article 2, paragraph (4) of the course Act on Prohibition of their trade, for their own Unauthorized Computer Access (Act No. 128 of 1999)) or a third party's illegal profits, thatany other act that harms the control of a person holding personal information, the person who has committed the violation is subject to imprisonment for not more than one yeartwo years or to a fine of not more than 5001,000,000 yen.

The provisions of the preceding paragraph do not preclude the application of the Penal Code (Act No. 45 of 1907) or any other penal provisions.

An employee ofIf an administrative entity who, by abusing that authority, acquires documents, drawings, or electronic or magnetic records containing confidential information on individualsorder for exclusive use for any purpose other than that employee's duties,measures is violated, the person who has committed the violation is subject to imprisonment for not more than one year or to a fine of not more than 5001,000,000 yen.

In cases that fall under one of the following items, the person who has committed the violation An employee of an administrative entity who, by abusing that authority, acquires documents, drawings, or electronic or magnetic records containing confidential information on individuals for exclusive use for any purpose other than that employee's duties, is subject to imprisonment for not more than one year or to a fine of not more than 500,000 yen:.

a person failed to submit a report or material under Article 146, paragraph (1); submitted a false report or material; failed to answer a question posed by the staff concerned; gave an false answer to a question; or refused, precluded, or evaded an inspection;

a person failed to submit a report under Article 153, or submitted a false report.

The provisions of Article 176, Article 177 and Articles 179 through 181 apply to aIn cases that fall under one of the following items, the person who has committed an offense under these Articles outside the violation is subject to a fine of Japan.not more than 500,000 yen:

a person failed to submit a report or material under Article 146, paragraph (1); submitted a false report or material; failed to answer a question posed by the staff concerned; gave a false answer to a question; or refused, precluded, or evaded an inspection;

a person failed to submit a report under Article 153, or submitted a false report.

The provisions of Articles 176 through 180 and Article 182 apply to a person who has committed an offense under these provisions (excluding Article 180, paragraph (2)) outside of Japan.

If a representative of a corporation, or an agent, employee or other worker of a corporation or person has committed a violation of the provisions set forth in the following items in relation to the corporation or person's business, in addition to the offender being punished, the corporation is subject to a fine set forth in those items, and the person is subject to a fine set forth in the respective Articles.

Articles 178 and 179:181: a fine of not more than 100 million yen;

Article 182:Articles 180 and 183: a fine set forth in that Articlethe respective Articles.

a person who has violated the provisions of Article 27, paragraph (8), Article 30, paragraph (2) (including as applied mutatis mutandis pursuant to Article 31, paragraph (3)) or Article 56;