Article 37Procedures for Dealing with Requests for Disclosure and Other Handling
第三十七条（開示等の請求等に応じる手続）
Changes by (Act No. 56 of 2026)
As regards a request under Article 32, paragraph (2), or a request under Article 33, paragraph (1) (including as applied mutatis mutandis pursuant to paragraph (5) of that Article; the same applies in paragraph (1) of the following Article and Article 39), Article 34, paragraph (1), Article 35, paragraph (1), (3), or (5) (hereinafter referred to as a "request for disclosure or other handling" in this Article and Article 54, paragraph (1)), a business handling personal information may decide on a method of receiving a request as prescribed by Cabinet Order. In such a case, an identifiable person must request disclosure or other handling in that way.
Changes by (Act No. 56 of 2026)
A business handling personal information may request an identifiable person requesting disclosure or other handling to present sufficient information to identify the personal data the business holds or the record of provision to a third party that would be subject to the disclosure or other handling. In such a case, the business handling personal information must provide information to help the person identify the relevant personal data the business holds or the relevant record of provision to a third party, or take other appropriate measures in consideration of the identifiable person's convenience, so as to allow the person to easily and accurately request disclosure or other handling.
Changes by (Act No. 56 of 2026)
A person may request disclosure or other handling through an agent, as prescribed by Cabinet Order.
開示等の請求等は、政令で定めるところにより、代理人によってすることができる。
In establishing procedures for dealing with requests for disclosure and other handling pursuant to the preceding three paragraphs, a business handling personal information must take care to ensure that the procedures do not impose an excessive burden on identifiable persons.
Read this with the articles around it
identifiable person
「本人」
The particular individual whom a given piece of personal information identifies.
Defined inArticle 2, paragraph (4)
personal data the business holds
「保有個人データ」
In Chapter IV, personal data (個人データ) that a business handling personal information (個人情報取扱事業者) has the authority to disclose, correct, add to or delete, stop using, erase and stop providing to third parties, other than data that a Cabinet Order (政令) names as data whose existence or absence, if made known, would harm the public interest or other interests.
Defined inArticle 16, paragraph (4)· applies only in this chapter
record of provision to a third party
「第三者提供記録」
In Article 33, paragraph (5) and Article 37, paragraph (2), the records that a business handling personal information (個人情報取扱事業者) must make under Article 29, paragraph (1) and Article 30, paragraph (3) when it provides personal data to a third party or receives it from one, as they relate to the personal data identifying a given person, other than records that a Cabinet Order (政令) names as records whose existence or absence, if made known, would harm the public interest or other interests.
Short name set inArticle 33, paragraph (5)· applies only in this provision and in Article 37, paragraph (2)
request for disclosure or other handling
「開示等の請求等」
In Article 37 and Article 54, paragraph (1), a demand under Article 32, paragraph (2) to be told the purpose of use of personal data the business holds (保有個人データ), or a request under Article 33, paragraph (1) (also as paragraph (5) of that Article applies it to records of provision to a third party), Article 34, paragraph (1) or Article 35, paragraph (1), (3) or (5) for disclosure, for correction, or for ceasing to use, erasing or ceasing to provide that data to third parties.
Short name set inArticle 37, paragraph (1)· applies only in this article and in Article 54, paragraph (1)