①"Personal information the administrative entity holds" in this Chapter and Chapter VIII means personal information that an employee of an administrative entity (in a case of an incorporated administrative agency or other prescribed corporation or a local incorporated administrative agency, its officer is included; hereinafter the same applies in this Chapter and Chapter VIII) prepares or acquires in the course of that employee's duties, and that administrative entity holds for organizational use by its employees; provided, however, that the personal information the administrative entity holds is limited to personal information recorded in administrative or similar documents (meaning administrative documents prescribed in Article 2, paragraph (2) of the Act on Access to Information Held by Administrative Organs (Act No. 42 of 1999; hereinafter referred to as the "Administrative Organs Information Disclosure Act" in this Chapter)), corporate documents (meaning corporate documents prescribed in Article 2, paragraph (2) of the Act on Access to Information Held by Incorporated Administrative Agencies (Act No. 140 of 2001); hereinafter referred to as "Incorporated Administrative Agencies Information Disclosure Act" in this Chapter; those documents include those listed in item (iv) of that paragraph), or local government documents (meaning documents, drawings, or electronic or magnetic records that an employee of a local government organ or local incorporated administrative agency prepares or acquires in the course of that employee's duties, and that local government organ or local incorporated administrative agency holds for organizational use by its employees; and excluding those prescribed by Cabinet Order as equivalent to those set forth in the items of Article 2, paragraph (2) of the Administrative Organs Information Disclosure Act) (the above-mentioned documents are hereinafter collectively referred to as "administrative or similar documents" in this Chapter).

②"Personal information file" in this Chapter and Chapter VIII means a collective body of information comprised of personal information the administrative entity holds, as set forth below:

③"Anonymized personal information the administrative entity holds" in this Chapter means any anonymized personal information that can be prepared in a way that processes all or a part of personal information the administrative entity holds that constitutes a personal information file that falls under all of the following items (if a part of that personal information the administrative entity holds contains non-disclosure information prescribed in Article 5 of the Administrative Organs Information Disclosure Act (excluding information listed in item (i) of that Article, and including information prescribed in the proviso of item (ii) of that Article; hereinafter the same applies in this paragraph), non-disclosure information prescribed in Article 5 of the Incorporated Administrative Agencies Information Disclosure Act (excluding information listed in item (i) of that Article, and including information prescribed in the proviso of item (ii) of that Article), or non-disclosure information prescribed in the information disclosure ordinance of local government (meaning a local government's ordinance which provides for the resident's or other equivalent person's right to request the disclosure of information the local government organ or local incorporated administrative agency holds; hereinafter the same applies in this Chapter) (that non-disclosure information means information equivalent to non-disclosure information prescribed in Article 5 of the Administrative Organs Information Disclosure Act), the part containing the above-mentioned non-disclosure information is excluded):

④The term "anonymized personal information file the administrative entity holds" in this Chapter means a collective body of information comprised of anonymized personal information the administrative entity holds, as set forth below:

⑤The term "sensitive personal information prescribed by local ordinance" in this Chapter means personal information (excluding sensitive personal information) that is held by a local government organ or local incorporated administrative agency and that is comprised of identifiers or their equivalent prescribed by a local government's ordinance, accounting for the regional characteristics and other circumstances, as those of which the handling requires special care so as not to cause unfair discrimination, prejudice, or other disadvantage to the identifiable person.

①Administrative entities may hold personal information only when necessary for conducting processes and functions under the jurisdiction provided by laws and regulations (including local ordinances; the same applies in Article 66, paragraph (2), items (iii) and (iv), Article 69, paragraph (2), items (ii) and (iii), and Section 4), and must specify the purpose of use of personal information as much as possible when holding this information.

②Administrative entities must not hold personal information beyond the extent necessary for the purpose of use specified pursuant to the provisions of the preceding paragraph.

③Administrative entities must not alter the purpose of use beyond a reasonable extent from that of the original purpose of use.

Before an administrative entity directly acquires personal information on an identifiable person that is recorded in a document (including an electronic or magnetic record), the administrative entity must clearly indicate the purpose of use to that person, except in the following cases:

The head of an administrative organ (for any organ designated by Cabinet Order referred to in Article 2, paragraph (8), items (iv) and (v), the head is designated for each respective organ by Cabinet Order; hereinafter the same applies in this Chapter and Article 174), a local government organ, an incorporated administrative agency or other prescribed corporation, and a local incorporated administrative agency (hereinafter referred to as an "administrative organ's head or administrative entity" in this Chapter and the following Chapter) must not utilize personal information using a method that has the possibility of fomenting or inducing unlawful or unjust act.

An administrative organ's head or administrative entity must not acquire personal information by deception or other wrongful means.

An administrative organ's head or administrative entity must endeavor to keep personal information the head or entity holds consistent with the past or the present facts within the scope necessary for fulfilling the purpose of use.

①An administrative organ's head or administrative entity must take necessary and appropriate measures for managing the security of personal information the administrative entity holds, preventing its leaking, loss or damage.

②The provisions of the preceding paragraph apply mutatis mutandis to cases in which a person set forth in each following item handles personal information in conducting services as prescribed in each item respectively:

An employee or a former employee of an administrative entity that handles personal information, a person engaged in or formerly engaged in business prescribed in each item of paragraph (2) of the preceding Article, or a staffing agency worker or a former staffing agency worker (meaning a staffing agency worker prescribed in Article 2, item (ii) of the Act on Securing the Proper Operation of Worker Dispatching Businesses and Protecting Dispatched Workers (Act No. 88 of 1985); hereinafter the same applies in this Chapter and Article 176) that handles personal information must not disclose personal information acquired in the course of that employee's work to other persons without reason or use this information for an unjust purpose.

①If there is a leak, loss or damage and other situation concerning the security of the personal information an administrative entity holds as prescribed by Order of the Personal Information Protection Commission that is highly likely to harm individual rights and interests, the administrative organ's head or administrative entity must report to that effect to the Personal Information Protection Commission, pursuant to Order of the Personal Information Protection Commission.

②In cases prescribed in the preceding paragraph, an administrative organ's head or administrative entity must notify an identifiable person of the occurrence of the situation pursuant to Order of the Personal Information Protection Commission; provided, however, that this does not apply to cases falling under any of each following item:

①An administrative organ's head or administrative entity must not personally use or provide other persons with personal information the administrative entity holds for any purpose other than the purpose of use, except cases based on laws and regulations.

②Notwithstanding the provisions of the preceding paragraph, when finding the case to fall under circumstances specified by any of the following items, an administrative organ's head or administrative entity may personally use or provide other persons with personal information the administrative entity holds for any purpose other than the purpose of use; provided, however, this does not apply if it is found that using that personal information personally or providing it to other persons for any purpose other than the purpose of use is likely to cause unjust prejudice to the rights or interests of the identifiable person or a third party:

③The provisions of the preceding paragraph do not preclude the application of the provisions of other laws and regulations which restrict the use or provision of personal information an administrative entity holds.

④When finding it particularly necessary for protecting the individual rights and interests, an administrative organ's head or administrative entity is to allow only particular departments, agencies, or employees within the organ to use personal information the administrative entity holds for any purpose other than the purpose of use.

When an administrative organ's head or administrative entity finds it necessary in providing personal information the administrative entity holds for the purpose of use or pursuant to the provisions of paragraph (2), item (iii) or (iv) of the preceding Article, they are to impose restrictions on the purpose or method of use of the personal information they provide or any other restrictions considered necessary on a person that receives that personal information, or request the person take necessary measures to prevent the leaking of and for the proper management of that personal information.

①Except in cases based on laws and regulations or set forth in Article 69, paragraph (2), item (iv), before an administrative organ's head or administrative entity provides personal information the administrative entity holds to a third party (excluding a person that has established a system that conforms to standards prescribed by Order of the Personal Information Protection Commission as necessary for continuously taking measures equivalent to the one that a business handling personal information prescribed in Article 16, paragraph (2) is to take concerning the handling of personal data prescribed in Article 16, paragraph (3) pursuant to the provisions of Section 2 of the preceding Chapter (referred to as "equivalent measures" in paragraph (3)); hereinafter the same applies in this paragraph and the following paragraph) in a foreign country (meaning a country or region located outside the territory of Japan; hereinafter the same applies in this Article) (excluding those prescribed by Order of the Personal Information Protection Commission as a foreign country that has established a personal information protection system recognized to have equivalent standards to that in Japan regarding the protection of individual rights and interests; hereinafter the same applies in this Article) for any purpose other than the purpose of use, the administrative organ's head or administrative entity must acquire the identifiable person's consent to the effect that the person approves the provision to a third party in a foreign country.

②When intending to obtain an identifiable person's consent pursuant to the provisions of the preceding paragraph, an administrative organ's head or administrative entity must provide the person in advance with information on the personal information protection system of the foreign country, on the measures the third party takes for the protection of personal information, and other information that serves as a reference to the person, pursuant to Order of the Personal Information Protection Commission.

③Except in those cases based on laws and regulations or set forth in Article 69, paragraph (2), item (iv), when an administrative organ's head or administrative entity has provided personal information the administrative entity holds to a third party in a foreign country (limited to a person that has established a system prescribed in paragraph (1)) for any purpose other than the purpose of use, the administrative organ's head or administrative entity must take necessary measures to ensure continuous implementation of the equivalent measures by the third party, and in response to the identifiable person's request, provide the person with information on the necessary measures, pursuant to Order of the Personal Information Protection Commission.

When finding it necessary in providing information related to personal information to a third party (limited to cases in which it is assumed that the third party acquires the information related to personal information as personal information), an administrative organ's head or administrative entity is to impose restrictions on the purpose or method of use of information related to personal information that they provide or any other restrictions considered necessary on the third party, or request the person take necessary measures to prevent the leaking of and for the proper management of the information.

①Except in cases based on laws and regulations, an administrative organ's head or administrative entity must not provide pseudonymized personal information (excluding those that are personal information; hereinafter the same applies in this Article and Article 128) to a third party (excluding a person entrusted with the handling of the pseudonymized personal information).

②An administrative organ's head or administrative entity must take necessary and appropriate measures for managing the security of personal data including preventing the leaking of pseudonymized personal information they handle.

③Except cases based on laws and regulations, in handling pseudonymized personal information, an administrative organ's head or administrative entity must neither acquire deleted or other related information (meaning identifiers or their equivalent, individual identification codes, and information on the method of processing as performed under Article 41, paragraph (1) that have been deleted from the personal information used to prepare the pseudonymized personal information), nor collate the pseudonymized personal information with other information, in order to identify the person identifiable by personal information that was used to prepare that pseudonymized personal information.

④Except cases based on laws and regulations, in handling pseudonymized personal information, an administrative organ's head or administrative entity must not utilize a contact address and other information contained in the pseudonymized personal information for telephoning, for sending by mail or by correspondence delivery prescribed in Article 2, paragraph (2) of the Act on Correspondence Delivery by Private Business Operators conducted by a general correspondence delivery operator prescribed in Article 2, paragraph (6) of that Act or a specified correspondence delivery operator prescribed in Article 2, paragraph (9) of that Act, for delivering a telegram, for transmitting information using a facsimile machine or electronic or magnetic means (meaning means that use electronic data processing system or means that utilize other information communication technology as prescribed by Order of the Personal Information Protection Commission), or for visiting a residence.

⑤The provisions of each preceding paragraph apply mutatis mutandis to cases in which a person that has been entrusted (including entrustment via two or more layers) with the handling of pseudonymized personal information by an administrative organ's head or administrative entity conducts the entrusted business.

①Before an administrative organ (excluding the Board of Audit; hereinafter the same applies in this Article) intends to hold personal information file, the head of the administrative organ must notify the Personal Information Protection Commission of the following matters. The same applies to cases in which an administrative organ intends to alter any matters for which notification has already been given:

②The provisions of the preceding paragraph do not apply to the personal information files set forth in the following:

③If an administrative organ ceases to hold the personal information file for which notification of the matters prescribed in paragraph (1) has been made or that personal information file comes to fall under item (ix) of the preceding paragraph, the head of the administrative organ must notify the Personal Information Protection Commission to that effect without delay.

①An administrative organ's head or administrative entity must prepare and publish a register containing the matters listed in paragraph (1), items (i) through (vii) as well as items (ix) and (x) of the preceding Article and other matters as prescribed by Cabinet Order with regard to the respective personal information files held by the administrative entity to which the head or entity in question belongs (that register is hereinafter referred to as the "personal information file register" in this Chapter).

②The provisions of the preceding paragraph do not apply to the personal information file set forth in the following:

③Notwithstanding the provisions of paragraph (1), if an administrative organ's head or administrative entity finds that inclusion of a part of the recorded particulars, the matters listed in paragraph (1), item (v) or (vii) of the preceding Article, or a personal information file in the personal information file register is likely to particularly hinder the proper execution of processes or services in relation to the purpose of use due to their nature, the administrative organ's head or administrative entity may refrain from including that part of the recorded particulars, the matters listed in those items, or the personal information file in the personal information file register.

④With regard to applying the provision of paragraph (1) related to a local government organ or a local incorporated administrative agency, the term "other matters as prescribed by Cabinet Order with regard to the respective personal information files held by the organ to which the head belongs" in that paragraph is replaced with "other matters as prescribed by Cabinet Order with regard to the respective personal information files held by the organ to which the head belongs, and also congaing an indication that it includes sensitive personal information prescribed by local ordinance, if that is the cases".

⑤The provisions of each preceding paragraph do not preclude a local government organ or a local incorporated administrative agency from preparing and publishing a register that is different from the personal information file register and contains matters regarding the status of holding personal information, as prescribed by local ordinance.

①Any person may request that an administrative organ's head or administrative entity disclose personal information by which that person is identifiable and that is held by the administrative entity to which the head or entity in question belongs, pursuant to the provisions of this Act.

②A legal representative of a minor or adult ward, or an agent privately appointed by the identifiable person (hereinafter collectively referred to as an "agent" in this Section) may make a request for disclosure (hereinafter referred to as a "request for disclosure" in this Section and Article 127) provided in the preceding paragraph on behalf of that person.

①A request for disclosure must be made by submitting a document containing the matters listed in the following items (hereinafter referred to as a "written request for disclosure" in paragraph (3)) to the administrative organ's head or administrative entity:

②In the case referred to in the preceding paragraph, as prescribed by Cabinet Order, the person making the request for disclosure must present or submit a document to indicate that the person is the person identifiable by the personal information the administrative entity holds that is subject to the request for disclosure (or the agent of the person, in the case of a request for disclosure under paragraph (2) of the preceding Article).

③If an administrative organ's head or administrative entity finds a formal deficiency in a written request for disclosure, they may ask the person who made the request for disclosure (hereinafter referred to as a "person requesting disclosure" in this Section) to amend the request, by setting a reasonable period of time. In this case, the administrative organ's head or administrative entity must endeavor to provide the person requesting disclosure with information that is helpful in the amendment.

①If a request for disclosure is filed, unless any of the information listed in each of the following items (hereinafter referred to as "non-disclosure information" in this Section) is recorded in the personal information the administrative entity holds which is subject to the request for disclosure, the administrative organ's head or administrative entity must disclose that information to the person requesting disclosure:

②With regard to applying the provision of the preceding paragraph related to a local government organ or a local incorporated administrative agency, the phrase "information listed in each of the following items (" in that paragraph is deemed to be replaced with "information listed in each of the following items (excluding information prescribed by local ordinance as information that is to be disclosed pursuant to the provisions of the information disclosure ordinance) or information equivalent to non-disclosure information prescribed in Article 5 of the Administrative Organs Information Disclosure Act, which is not disclosed in the information disclosure ordinance, and which is prescribed by the ordinance as information that needs to be non-disclosed in order to ensure consistency with that information disclosure ordinance (".

①If non-disclosure information is included in personal information an administrative entity holds that is subject to a request for disclosure, and it is possible to easily separate and exclude the part that constitutes non-disclosure information from the personal information, the administrative organ's head or administrative entity must disclose the part from which the part that constitutes non-disclosure information has been excluded to the person requesting disclosure.

②If the information set forth in paragraph (1), item (ii) of the preceding Article (limited to information that can be used to identify a specific individual other than the person requesting disclosure) is included in personal information an administrative entity holds that is subject to a request for disclosure, and it is found that disclosure of the information would not be likely to cause damage to the rights and interests of a person other than the person requesting disclosure if the part in the information that constitutes a name, date of birth, or other identifiers or their equivalent that can be used to identify a specific individual other than the person requesting disclosure, or that constitutes an individual identification code were excluded from that information, the other part in the information from which the part mentioned above has been excluded is deemed not to be included in the information set forth in that item, and the provisions of the preceding paragraph apply to it.

Even if non-disclosure information is included in personal information an administrative entity holds that is subject to a request for disclosure, the administrative organ's head or administrative entity may disclose the personal information the administrative entity holds to the person requesting disclosure, if they finds it particularly necessary to do so for protecting the individual rights and interests.

If non-disclosure information is supposed to be disclosed by merely answering whether or not personal information an administrative entity holds that is subject to a request for disclosure exists, the administrative organ's head or administrative entity may refuse the request for disclosure, without making the existence or non-existence of that personal information clear.

①When disclosing all or a part of personal information an administrative entity holds that is subject to a request for disclosure, the administrative organ's head or administrative entity must make a decision to that effect, and notify the person requesting disclosure of that decision, the purpose of use of that personal information to be disclosed, and matters specified by Cabinet Order relating to the implementation of disclosure in writing; provided, however, that this does not apply to the purpose of use in cases that fall under Article 62, item (ii) or item (iii).

②If an administrative organ's head or administrative entity decides not to disclose any personal information the administrative entity holds that is subject to a request for disclosure (this includes the cases in which the administrative organ's head or administrative entity refuses a request for disclosure pursuant to the provisions of the preceding Article or does not hold that personal information), the administrative organ's head or administrative entity must notify the person requesting disclosure to that effect in writing.

①Decisions on disclosure must be made within thirty days from the date of the request for disclosure; provided, however, that if an amendment is requested pursuant to the provisions of Article 77, paragraph (3), the number of days required for the amendment is not included within that period of time.

②Notwithstanding the provisions of the preceding paragraph, if there are justifiable grounds such as difficulties arising from conducting processes, an administrative organ's head or administrative entity may extend the period of time prescribed in that paragraph for up to thirty days. In this case, the administrative organ's head or administrative entity must notify the person requesting disclosure in writing of the extended period and the grounds for the extension, without delay.

Notwithstanding the provisions of the preceding Article, if there is a considerably large amount of personal information an administrative entity holds that is subject to a request for disclosure, and there would be a risk that the performance of duties is considerably hindered if a decision on disclosure were made on all of those requests within sixty days from the date of a request for disclosure, it is sufficient for the administrative organ's head or administrative entity to make a decision on disclosure for a reasonable portion of the personal information the administrative entity holds for which disclosure has been requested within that period of time, and to make a decision on disclosure for the remaining personal information within a reasonable period of time. In this case, the administrative organ's head or administrative entity must notify the person requesting disclosure of the following matters in writing within the period of time prescribed in paragraph (1) of that Article:

①An administrative organ's head or administrative entity may transfer the case to another head or entity upon consulting with them, if the personal information the administrative entity holds that is subject to a request for disclosure has been provided by an administrative entity other than one to which the head or entity in question belongs, or there are justifiable grounds for that other head or entity to make a decision on disclosure. In this case, the administrative organ's head or administrative entity that has transferred the case must notify the person requesting disclosure in writing to the effect that the case has been transferred.

②If a case has been transferred pursuant to the provisions of the preceding paragraph, an administrative organ's head or administrative entity to which the case has been transferred must make a decision on disclosure in relation to the relevant request for disclosure. In this case, actions that the administrative organ's head or administrative entity that has transferred the case has made prior to the transfer are deemed to be those that the administrative organ's head or administrative entity to which the case has been transferred has made.

③In the case referred to in the preceding paragraph, if the administrative organ's head or administrative entity to which the case has been transferred makes a decision set forth in Article 82, paragraph (1) (hereinafter referred to as a "decision to disclose" in this Section), the administrative organ's head or administrative entity must implement the disclosure. In this case, the administrative organ's head or administrative entity that has transferred the case must cooperate as necessary in the implementation of that disclosure.

①If information on a person other than the State, an incorporated administrative agency or other prescribed corporation, a local government, a local incorporated administrative agency, or a person requesting disclosure (hereinafter referred to as a "third party" in this Article, Article 105, paragraph (2), item (iii), and Article 107, paragraph (1)) is included in the personal information an administrative entity holds that is subject to a request for disclosure, the administrative organ's head or administrative entity may notify the third party of the content of the information on that third party, and other matters specified by Cabinet Order, and may grant an opportunity to submit a written opinion, pursuant to the provisions of Cabinet Order, when making a decision on disclosure.

②In the cases that fall under any of the following items, before making a decision to disclose, an administrative organ's head or administrative entity must notify the third party in writing of the content of the information on the third party that is subject to a request for disclosure and other matters specified by Cabinet Order, and grant that third party an opportunity to submit a written opinion, pursuant to the provisions of Cabinet Order; provided, however, that this does not apply to cases in which the third party's location is unknown:

③If the third party that was granted an opportunity to submit a written opinion pursuant to the provisions of the preceding two paragraphs has submitted a written opinion manifesting the intention to oppose disclosure of the information concerning the third party, but the administrative organ's head or administrative entity makes a decision to disclose, the head or entity must place at least two weeks between the day of the decision to disclose and the day on which the disclosure will be implemented. In this case, upon making the decision to disclose, the administrative organ's head or administrative entity must immediately notify the third party that submitted that written opinion (referred to as a "written opposition opinion" in Article 105) in writing to the effect that the decision to disclose was made, of the grounds for its decision, and of the date on which the disclosure will be implemented.

①The disclosure of personal information an administrative entity holds is implemented through inspection or by the delivery of copies, if that personal information is contained in the form of documents or drawings; or by means designated by the administrative organ's head or administrative entity in consideration of the type of the record, the state of its digitalization, and other factors, if that personal information is contained in the electronic or magnetic records; provided, however, that if disclosure of personal information an administrative entity holds is to be implemented through inspection, and if the administrative organ's head or administrative entity finds that inspection of the original material is likely to hinder the preservation of the documents or pictures that contain the personal information, or there are other justifiable grounds for doing so, the disclosure of the personal information may be implemented through inspection of a copy of the documents or drawings.

②An administrative entity must make its rules on the means of disclosure for electronic or magnetic records based on the preceding paragraph available for public inspection.

③A person to whom personal information an administrative entity holds is disclosed based upon a decision to disclose must indicate the means of implementing the disclosure that the person requests and other matters prescribed by Cabinet Order to the administrative organ's head or administrative entity that has made the decision to disclose, pursuant to the provisions of Cabinet Order.

④The indication under the preceding paragraph must be made within thirty days from the date of the notice prescribed in Article 82, paragraph (1); provided, however, this does not apply if there are justifiable grounds for being unable to make the indication within that period of time.

①Notwithstanding the main clause of paragraph (1) of the preceding Article, if personal information an administrative entity holds that is subject to a request for disclosure is to be disclosed to the person requesting disclosure by the same means as those prescribed in the main clause of that paragraph pursuant to the provisions of other laws and regulations (only within the period of time for disclosure, if it is specified), the administrative organ's head or administrative entity does not disclose the personal information the administrative entity holds by that same means; provided, however, that this does not apply when there are those provisions in other laws and regulations to the effect that disclosure is not implemented in certain cases.

②If the means of disclosure designated by the provisions of other laws and regulations is public inspection, that public inspection is deemed to be inspection referred to in the main clause of paragraph (1) of the preceding Article, and the provisions of the preceding paragraph apply.

①A person that makes a request for disclosure to the head of an administrative organ must pay a fee prescribed by Cabinet Order within the actual cost, pursuant to the provisions of Cabinet Order.

②A person that makes a request for disclosure to a local government organ must pay a fee specified by local ordinance within the actual cost, as prescribed by local ordinance.

③When the amount of the fee referred to in the preceding two paragraphs is established, consideration must be given to making the amount as affordable as possible.

④A person that makes a request for disclosure to an incorporated administrative agency or other prescribed corporation must pay a fee specified by the incorporated administrative agency or other prescribed corporation.

⑤An incorporated administrative agency or other prescribed corporation specifies the amount of the fee referred to in the preceding paragraph within the actual cost, taking the amount of the fee referred to in paragraph (1) into consideration.

⑥An incorporated administrative agency or other prescribed corporation must make the rules under the preceding two paragraphs available for general inspection.

⑦A person that makes a request for disclosure to a local incorporated administrative agency must pay a fee specified by the local incorporated administrative agency.

⑧A local incorporated administrative agency specifies the amount of the fee referred to in the preceding paragraph within the actual cost, taking the amount of the fee referred to in paragraph (2) into consideration.

⑨A local incorporated administrative agency must make the rules under the preceding two paragraphs available for general inspection.

①Any person who thinks that the content of personal information an administrative entity holds by which that person is identifiable (the information is limited to the following; the same applies in Article 98, paragraph (1)) is untrue may make a request for correction (including addition or deletion; hereinafter the same applies in this Section) of the personal information to the administrative organ's head or administrative entity that holds it, pursuant to the provisions of this Act; provided, however, that this does not apply if a special procedure for correction of the personal information the administrative entity holds is prescribed by other laws and regulations:

②An agent may make a request for correction (hereinafter referred to as a "request for correction" in this Section and Article 127) as prescribed in the preceding paragraph on behalf of the identifiable person.

③A request for correction must be made within ninety days from the date of disclosure of personal information an administrative entity holds.

①A document describing the matters listed in the following (referred to as a "written request for correction" in paragraph (3)) must be submitted to an administrative organ's head or administrative entity for a request for correction:

②In the case referred to in the preceding paragraph, a person making a request for correction must present or submit a document to indicate that the person is identifiable by the information an administrative entity holds that is subject to the request for correction (or the in the case of a request for correction under paragraph (2) of the preceding Article, the agent of the identifiable person), pursuant to the provisions of Cabinet Order.

③If an administrative organ's head or administrative entity finds a formal deficiency in a written request for correction, the administrative organ's head or administrative entity may ask the person who made the request for correction (hereinafter referred to as a "person requesting correction" in this Section) to amend the request, by setting a reasonable period of time.

If a request for correction is filed and an administrative organ's head or administrative entity finds that there are grounds for that request for correction, they must correct the personal information the administrative entity holds that is subject to the request for correction within the scope necessary for achieving the purpose of use of that personal information.

①When correcting the personal information an administrative entity holds that is subject to a request for correction, the administrative organ's head or administrative entity must make a decision to that effect, and notify the person requesting correction of that decision in writing.

②When not correcting the personal information an administrative entity holds that is subject to a request for correction, the administrative organ's head or administrative entity must make a decision to that effect, and notify the person requesting correction of that decision in writing.

①The decisions referred to in the items of the preceding Article (hereinafter referred to as a "decisions on correction" in this Section) must be made within thirty days from the date of a request for correction; provided, however, that if an amendment is requested pursuant to the provisions of Article 91, paragraph (3), the number of days required for that amendment is not included within this period of time.

②Notwithstanding the provisions of the preceding paragraph, if there are justifiable grounds such as difficulties arising from conducting processes, an administrative organ's head or administrative entity may extend the period of time prescribed in that paragraph for up to thirty days. In this case, the administrative organ's head or administrative entity must notify the person requesting correction in writing of the extended period and the grounds for the extension.

Notwithstanding the provisions of the preceding Article, if an administrative organ's head or administrative entity finds that to make a decision on correction would require a particularly long period of time, it is sufficient for them to make a decision on correction within a reasonable period of time. In this case, the administrative organ's head or administrative entity must notify the person requesting correction in writing of the following matters within the period of time prescribed in paragraph (1) of that Article:

①An administrative organ's head or administrative entity may transfer the case to another head or entity upon consulting them, if the personal information the administrative entity holds that is subject to a request for correction is disclosed pursuant to Article 85, paragraph (3), or there are justifiable grounds for that other head or entity to make a decision on correction. In this case, the administrative organ's head or administrative entity that has transferred the case must notify the person requesting correction to the effect that the case has been transferred in writing.

②If a case has been transferred pursuant to the provisions of the preceding paragraph, the administrative organ's head or administrative entity to which the case has been transferred must make a decision on correction in relation to the relevant request for correction. In this case, actions that the administrative organ's head or administrative entity that has transferred the case has made prior to the transfer are deemed to be those that the administrative organ's head or administrative entity to which the case has been transferred has made.

③In the case referred to in the preceding paragraph, when the administrative organ's head or administrative entity to which the case has been transferred makes a decision referred to in Article 93, paragraph (1) (hereinafter referred to as a "decision to make a correction" in this paragraph and the following Article), the administrative organ's head or administrative entity that has transferred the case must implement the correction based on that decision to make a correction.

If an administrative organ's head or administrative entity has implemented a correction of personal information the administrative entity holds based on a decision to make a correction, and the head or entity finds it necessary to do so, they must give a notification to that effect in writing without delay to a party to which the personal information the administrative entity holds has been provided.

①Any person who thinks that personal information an administrative entity holds by which that person is identifiable falls under any of the following items may make a request for the measures specified in those items to the administrative organ's head or administrative entity that holds the personal information, pursuant to the provisions of this Act; provided, however, that this does not apply if a special procedure for ceasing to use personal information the administrative entity holds, deleting that personal information, or ceasing to provide that personal information (hereinafter referred to as "ceasing to use personal information" in this Section) is prescribed by other laws and regulations:

②An agent may make a request for ceasing to use personal information (hereinafter referred to as a "request for ceasing to use personal information" in this Section and Article 127) prescribed in the preceding paragraph on behalf of the identifiable person.

③A request for ceasing to use personal information must be made within ninety days from the date of disclosure of the personal information the administrative entity holds.

①For a request for ceasing to use personal information, a document describing the matters listed in the following (referred to as a "written request for ceasing to use personal information" in paragraph (3)) must be submitted to the administrative organ's head or administrative entity:

②In the case referred to in the preceding paragraph, the person making a request for ceasing to use personal information must present or submit a document to indicate that the person is identifiable by the personal information the administrative entity holds that is subject to the request for the cessation (or the agent of the identifiable person, in the case of a request for ceasing to use personal information that is made pursuant to the provisions of paragraph (2) of the preceding Article).

③When an administrative organ's head or administrative entity finds that there is a formal deficiency of a written request for ceasing to use personal information, the head or entity may ask the person having made the request for ceasing to use personal information (hereinafter referred to as a "person making a request for ceasing to use personal information" in this Section) to amend that request, by setting a reasonable period of time.

When a request for ceasing to use personal information is filed, and an administrative organ 's head or administrative entity finds that there are grounds for the request, the head or entity must cease to use the personal information the administrative entity holds that is subject to the request within the scope necessary for ensuring the proper handling of personal information in the administrative entity to which the administrative organ's head or administrative entity belongs; provided, however, that this does not apply if it is found that ceasing to use the personal information the administrative entity holds is likely to hinder the proper execution of the process or service relating to the purpose of use of that personal information due to their nature.

①When ceasing to use personal information an administrative entity holds that is subject to a request for ceasing to use personal information, the administrative organ's head or administrative entity must make a decision to that effect, and notify the person making a request for the cessation to that effect in writing.

②When not ceasing to use personal information an administrative entity holds that is subject to a request for ceasing to use personal information, the administrative organ's head or administrative entity must make a decision to that effect, and notify the person making a request for the cessation to that effect in writing.

①A decision set forth in the paragraphs of the preceding Article (hereinafter referred to as a "decision on ceasing to use personal information" in this Section) must be made within thirty days from the date of a request for ceasing to use personal information; provided, however, that in cases in which an amendment is requested pursuant to the provisions of Article 99, paragraph (3), the number of days required for the amendment is not included within that period of time.

②Notwithstanding the provisions of the preceding paragraph, if there are justifiable grounds such as difficulties arising from conducting processes, an administrative organ's head or administrative entity may extend the period of time prescribed in that paragraph for up to thirty days. In this case, the administrative organ's head or administrative entity must notify the person making a request for ceasing to use personal information in writing of the extended period and the grounds for the extension, without delay.

Notwithstanding the provisions of the preceding Article, if an administrative organ's head or administrative entity finds that making a decision on ceasing to use personal information would require a particularly long period of time, it is sufficient for them to make a decision on ceasing to use the personal information within a reasonable period of time. In this case, the administrative organ's head or administrative entity must notify the person making a request for ceasing to use the personal information in writing of the following matters within the period of time prescribed in paragraph (1) of that Article:

①The provisions of Article 9, Article 17, Article 24, Chapter II, Sections 3 and 4, and Article 50, paragraph (2) of the Administrative Complaint Review Act (Act No. 68 of 2014) do not apply to an appeal for review to any inaction of an administrative organ's head or administrative entity (excluding a local government organ or a local incorporated administrative agency; the same applies in the following paragraph and the following Article) in relation to a decision on disclosure, a decision on correction, a decision on ceasing to use personal information, or in relation to a request for disclosure, a request for correction, or a request for ceasing to use personal information.

②When applying the provisions in Chapter II of the Administrative Complaint Review Act to an appeal for review to any inaction of an administrative organ's head or administrative entity in relation to a decision on disclosure, a decisions on correction, a decision ceasing to use personal information, or in relation to a request for disclosure, a request for correction, or a request for ceasing to use personal information, the term "a person who has been designated pursuant to the provisions of Article 9, paragraph (1) (hereinafter referred to as a "review officer)" in Article 11, paragraph (2) of that Act is deemed to be replaced with "an administrative agency (including an administrative agency that takes over the appeal for review pursuant to the provisions in Article 14; hereinafter referred to as a "reviewing agency") to which an appeal for review has been filed pursuant to the provisions in Article 4 (including a Cabinet Order issued pursuant to Article 107, paragraph (2) of the Act on the Protection of Personal Information (Act No. 57 of 2003)"); the term "review officer" in Article 13, paragraphs (1) and (2) of that Act is deemed to be replaced with the term "reviewing agency"; the phrase "has been filed or a written opinion to suggest the necessity to order a stay of execution as prescribed in Article 40 has been submitted by a review officer" in Article 25, paragraph (7) of that Act is deemed to be replaced with "has been filed"; the term "Administrative Complaint Review Board, etc." in Article 44 of that Act is deemed to be replaced with "Information Disclosure and Personal Information Protection Review Board (or a review board specified by another law if the President of the Board of Audit is the reviewing agency, the same applies in Article 50, paragraph (1), item (iv))"; in that Article, the phrase "has received a report to its consultation from the Administrative Complaint Review Board, etc. (or when a review officer's written opinion has been submitted in cases in which the consultation pursuant to the provisions of paragraph (1) of the preceding Article is not necessary (excluding the cases falling under item (ii) or (iii) of that paragraph), or when deliberations prescribed in item (ii) or (iii) of that paragraph have been held in the cases falling under item (ii) or (iii) of that paragraph)" is deemed to be replaced with "has received a report to its consultation from the Administrative Complaint Review Board, etc."; and the term "the review officer's written opinion or the written report from the Administrative Complaint Review Board, etc. or the Council, etc." in Article 50, paragraph (1), item (iv) of that Article is deemed to be replaced with "the Information Disclosure and Personal Information Protection Review Board".

①Except in the cases that fall under any of the following items, when an appeal for review is filed for any inaction related to a decision on disclosure, a decisions on correction, or a decision on ceasing to use personal information, or related to a request for disclosure, a request for correction, or a request for ceasing to use personal information, the administrative organ's head or administrative entity that is expected to make a determination on that appeal for review must consult the Information Disclosure and Personal Information Protection Review Board (or with a review board separately provided for by law, if the administrative organ's head or administrative entity that is expected to make a determination on the appeal is the President of the Board of Audit):

②An administrative organ's head or administrative entity that has made a consultation pursuant to the provisions of the preceding paragraph must notify the following persons to that effect:

③The provisions of the preceding two paragraphs apply mutatis mutandis to a local government organ or a local incorporated administrative agency. In this case, the phrase "Information Disclosure and Personal Information Protection Review Board (or with a review board separately provided for by law, if the administrative organ's head or administrative entity that is expected to make a determination on the appeal is the President of the Board of Audit" in paragraph (1) is replaced with "organ referred to in Article 81, paragraph (1) or paragraph (2) of the Administrative Complaint Review Act".

①The provisions of Article 9, paragraphs (1) through (3), Article 17, Article 40, Article 42, Chapter II, Section 4, and Article 50, paragraph (2) of the Administrative Complaint Review Act do not apply to an appeal for review to any inaction of a local government organ or a local incorporated administrative agency in relation to a decision on disclosure, a decision on correction, a decision on ceasing to use personal information, or in relation to a request for disclosure, a request for correction, or a request for ceasing to use personal information.

①The provisions of Article 86, paragraph (3) apply mutatis mutandis to the cases in which the determination falls under any of the following items:

②With regard to an appeal for review to any inaction related to a decision on disclosure, a decision on correction, a decision on ceasing to use personal information, or related to a request for disclosure, a request for correction, or a request for ceasing to use personal information, the special provisions prescribed in Article 4 of the Administrative Complaint Review Act may be established as provided for by Cabinet Order (or as provided for by local ordinance, in cases of a local government organ or local incorporated administrative agency).

The provisions in this Section do not preclude a local government from providing necessary provisions by local ordinance regarding matters concerning the procedure for disclosing, correcting, or ceasing to use personal information an administrative entity holds, or for a request for review, unless they violate the provisions in this Section.

①An administrative organ's head or administrative entity may prepare anonymized personal information the administrative entity holds (limited to information constituting anonymized personal information files the administrative entity holds; hereinafter the same applies in this Section) pursuant to the provisions of this Section.

②Except cases that fall under any of the following items, an administrative organ's head or administrative entity must not provide other persons with anonymized personal information the administrative entity holds:

③Notwithstanding the provisions of Article 69 and except cases based on laws and regulations, an administrative organ's head or administrative entity must not personally use or provide other persons with deleted information (limited to information constituting personal information the administrative entity holds) for any purpose other than the purpose of use.

④The term "deleted information" in the preceding paragraph means an identifier or the equivalent or individual identification code deleted from personal information an administrative entity holds which was used to prepare anonymized personal information it holds.

If an administrative organ's head or administrative entity finds that a personal information file held by the administrative entity to which the head or entity in question belongs falls under all of the items in Article 60, paragraph (3), the following matters regarding that personal information file must be registered in the personal information file register; in applying the provisions in Article 75, paragraph (1) to that personal information file in this case, the term "item (x)" in that paragraph is deemed to be replaced with "item (x) and each item in Article 110":

As provided for by Order of the Personal Information Protection Commission, an administrative organ's head or administrative entity is to periodically request a proposal as specified in paragraph (1) of the following Article on a personal information file held by the administrative entity to which the head or entity in question belongs (limited to those for which matters listed in item (i) of the preceding Article are registered in the personal information file register; hereinafter the same applies in this Section).

①In response to a request under the preceding Article, if a person intends to use, for their business, anonymized personal information an administrative entity holds into which personal information constituting a personal information file it holds has been processed, that person may submit a proposal on their business to the administrative organ's head or administrative entity.

②A written document stating all of the following matters must be submitted to the administrative organ's head or administrative entity according to Order of the Personal Information Protection Commission for the proposal referred to in the preceding paragraph:

③The documents referred to in the preceding paragraph must be accompanied by the documents listed below and other documents specified by Order of the Personal Information Protection Commission:

A person falling under one of the following items may not make a proposal in paragraph (1) of the preceding Article:

①If a proposal referred to in Article 112, paragraph (1) is submitted, the administrative organ's head or administrative entity must examine whether it meets the following criteria: