If there is a leak, loss or damage and other situation concerning the security of the personal information an administrative entity holds as prescribed by Order of the Personal Information Protection Commission that is highly likely to harm individual rights and interests, the administrative organ's head or administrative entity must report to that effect to the Personal Information Protection Commission, pursuant to Order of the Personal Information Protection Commission.
In cases prescribed in the preceding paragraph, an administrative organ's head or administrative entity must notify an identifiable person of the occurrence of the situation pursuant to Order of the Personal Information Protection Commission; provided, however, that this does not apply to cases falling under any of each following item:
cases in which it is difficult to give a notification to the identifiable person, and necessary alternative measures are taken to protect the person's rights and interests;
本人への通知が困難な場合であって、本人の権利利益を保護するため必要なこれに代わるべき措置をとるとき。
cases in which the personal information the administrative organ or agency holds includes any of information set forth in each item of Article 78, paragraph (1).