Chapter III Measures to Protect Personal Information
The law as Act Partially Amending the Act on the Protection of Personal Information, etc. (Act No. 56 of 2026) leaves it, with the words it changes marked.
The main text is read a page at a time: a chapter to a page, and a long chapter in runs of articles. The whole main text, and the supplementary provisions and appended tables this amendment changes. Those it leaves untouched are on the page for the text in force.
Chapter III Measures to Protect Personal Information第三章 個人情報の保護に関する施策等
Section 1 Basic Policy on the Protection of Personal Information第一節 個人情報の保護に関する基本方針
The government must establish a basic policy on the protection of personal information (hereinafter referred to as a "basic policy") in order to further comprehensive and integrated measures to protect personal information.
The basic policy is to provide for the following details:
基本方針は、次に掲げる事項について定めるものとする。
Article 7, paragraph (2), item (i)
the basic course of action for furthering measures to protect personal information;
個人情報の保護に関する施策の推進に関する基本的な方向
Article 7, paragraph (2), item (ii)
the details of the measures to protect personal information that are to be taken by the national government;
国が講ずべき個人情報の保護のための措置に関する事項
Article 7, paragraph (2), item (iii)
the basic details of the measures to protect personal information that are to be taken by local governments;
地方公共団体が講ずべき個人情報の保護のための措置に関する基本的な事項
Article 7, paragraph (2), item (iv)
the basic details of the measures to protect personal information that are to be taken by incorporated administrative agencies or other prescribed corporations;
独立行政法人等が講ずべき個人情報の保護のための措置に関する基本的な事項
Article 7, paragraph (2), item (v)
the basic details of the measures to protect personal information that are to be taken by local incorporated administrative agencies;
地方独立行政法人が講ずべき個人情報の保護のための措置に関する基本的な事項
Article 7, paragraph (2), item (vi)Changed
the basic details of the measures to protect personal information to be taken by businesses handling personal information prescribed in Article 16, paragraph (2), businesses handling pseudonymized personal information prescribed in paragraph (56) of that Article, businesses handling anonymized personal information prescribed in paragraph (67) of that Article, and certified personal information protection organizations prescribed in Article 51, paragraph (1);
The provisions of the preceding two paragraphs apply mutatis mutandis to amendments to the basic policy.
前二項の規定は、基本方針の変更について準用する。
Section 2 Measures Taken by the National Government第二節 国の施策
Article 8第八条
Protection of Personal Information Held by a National Government Organ(国の機関等が保有する個人情報の保護)
Article 8, paragraph (1)
The national government is to take necessary measures so as to ensure the proper handling of personal information held by its organs.
国は、その機関が保有する個人情報の適正な取扱いが確保されるよう必要な措置を講ずるものとする。
Article 8, paragraph (2)
The national government is to take necessary measures so as to ensure the proper handling of personal information held by incorporated administrative agencies or other prescribed corporations.
The national government is to take the necessary measures, such as providing information and formulating guidelines to ensure that local governments and businesses properly and effectively implement the measures that they are required to take, in order to support measures to protect personal information which local governments formulate and implement, and in order to support actions that the people or businesses take to ensure the proper handling of personal information.
The national government is to take the necessary measures to ensure the appropriate and prompt processing of complaints arising between businesses and identifiable persons regarding the handling of personal information.
Measures to Ensure the Proper Handling of Personal Information(個人情報の適正な取扱いを確保するための措置)
Article 11, paragraph (1)
The national government is to take the necessary measures to ensure that businesses handling personal information as prescribed in the following Chapter properly do so, by effecting an appropriate division of roles between the national and local governments.
The national government is to take the necessary measures to ensure the proper handling of personal information by local governments and local incorporated administrative agencies prescribed in Chapter V.
Local governments are to take the necessary measures in order to ensure the proper handling of personal information held by local incorporated administrative agencies they establish.
Local governments must endeavor to take the necessary measures to support businesses and residents within their territory so as to ensure the proper handling of personal information.
Local governments must endeavor to provide mediation for complaint processing and take other necessary measures to ensure that any complaint arising between a business and an identifiable person regarding the handling of personal information is processed appropriately and promptly.