Supplementary Provisions
附 則
Supplementary Provisions, Article 1Effective Date
第一条（施行期日）
This Act comes into effect as of the date specified by Cabinet Order within a period not exceeding 2 years from the date of promulgation; provided, however, that the provisions set forth in the following items come into effect as of the dates specified respectively in those items.
この法律は、公布の日から起算して二年を超えない範囲内において政令で定める日から施行する。ただし、次の各号に掲げる規定は、当該各号に定める日から施行する。
the provisions of Articles 9 through 11 of the Supplementary Provisions: the date of promulgation;
附則第九条から第十一条までの規定 公布の日
the provisions of Article 1 deleting Article 84 of the Act on the Protection of Personal Information, renumbering Article 83 of that Act as Article 84 of that Act, and adding one Article after Article 82 of that Act, the provisions amending Article 85 of that Act, the provisions amending Article 86 of that Act, and the provisions amending Article 87 of that Act; the provisions of Article 2 amending Article 57 of the Act on the Use of Numbers to Identify a Specific Individual in Administrative Procedures; and the provisions of Article 3 amending Article 46 of the Act on Anonymously Processed Medical Information to Contribute to Research and Development in the Medical Field, the provisions adding one Article after Article 46 of that Act, the provisions amending Article 48 of that Act, and the provisions amending Article 49 of that Act, and the provisions of Article 8 of the Supplementary Provisions: the day on which six months have elapsed from the date of promulgation;
第一条中個人情報の保護に関する法律第八十四条を削り、同法第八十三条を同法第八十四条とし、同法第八十二条の次に一条を加える改正規定、同法第八十五条の改正規定、同法第八十六条の改正規定及び同法第八十七条の改正規定、第二条中行政手続における特定の個人を識別するための番号の利用等に関する法律第五十七条の改正規定並びに第三条中医療分野の研究開発に資するための匿名加工医療情報に関する法律第四十六条の改正規定、同法第四十六条の次に一条を加える改正規定、同法第四十八条の改正規定及び同法第四十九条の改正規定並びに附則第八条の規定 公布の日から起算して六月を経過した日
the provisions of the following Article and Article 7 of the Supplementary Provisions: the date specified by Cabinet Order within a period not exceeding one year and six months from the date of promulgation.
次条及び附則第七条の規定 公布の日から起算して一年六月を超えない範囲内において政令で定める日
Supplementary Provisions, Article 2Transitional Measures Concerning Notification, etc.
第二条（通知等に関する経過措置）
A person that intends to provide personal data to a third party pursuant to the provisions of Article 23, paragraph (2) of the Act on the Protection of Personal Information as amended by Article 1 (hereinafter referred to as the "New Act on the Protection of Personal Information") may, even before the date on which this Act comes into effect (hereinafter referred to as "the Effective Date"), as provided by Order of the Personal Information Protection Commission, notify the identifiable person of matters equivalent to those set forth in items (i), (iv), and (viii) of that paragraph and file a notification of those matters with the Personal Information Protection Commission. In this case, that notice and notification are deemed, on or after the Effective Date, to be the notice and notification under the provisions of that paragraph.
Supplementary Provisions, Article 3
第三条
If matters equivalent to the address of the person responsible for managing the personal data and, for a corporation, the name of its representative, as prescribed in Article 23, paragraph (5), item (iii) of the New Act on the Protection of Personal Information, have been notified to the identifiable person before the Effective Date, that notice is deemed to have been given pursuant to the provisions of that item.
新個人情報保護法第二十三条第五項第三号に規定する個人データの管理について責任を有する者の住所及び法人にあっては、その代表者の氏名に相当する事項について、施行日前に、本人に通知されているときは、当該通知は、同号の規定により行われたものとみなす。
Supplementary Provisions, Article 4Transitional Measures Concerning the Provision of Information, etc. in Connection with Provision to a Third Party in a Foreign Country
第四条（外国にある第三者への提供に係る情報提供等に関する経過措置）
The provisions of Article 24, paragraph (2) of the New Act on the Protection of Personal Information apply to cases in which a business handling personal information obtains the consent of the identifiable person pursuant to the provisions of paragraph (1) of that Article on or after the Effective Date.
新個人情報保護法第二十四条第二項の規定は、個人情報取扱事業者が施行日以後に同条第一項の規定により本人の同意を得る場合について適用する。
The provisions of Article 24, paragraph (3) of the New Act on the Protection of Personal Information apply to cases in which a business handling personal information provides personal data, on or after the Effective Date, to a third party in a foreign country prescribed in that paragraph.
新個人情報保護法第二十四条第三項の規定は、個人情報取扱事業者が施行日以後に個人データを同項に規定する外国にある第三者に提供した場合について適用する。
Supplementary Provisions, Article 5Transitional Measures Concerning the Consent of the Identifiable Person to the Provision of Information Related to Personal Information to a Third Party, etc.
第五条（個人関連情報の第三者提供に係る本人の同意等に関する経過措置）
If there is consent of the identifiable person concerning the handling of information related to personal information that was given before the Effective Date, and that consent is equivalent to consent to the effect of permitting the provision of information related to personal information to a third party under the provisions of Article 26-2, paragraph (1) of the New Act on the Protection of Personal Information, the consent referred to in item (i) of that paragraph is deemed to have been given.
施行日前になされた本人の個人関連情報の取扱いに関する同意がある場合において、その同意が新個人情報保護法第二十六条の二第一項の規定による個人関連情報の第三者への提供を認める旨の同意に相当するものであるときは、同項第一号の同意があったものとみなす。
The provisions of Article 24, paragraph (3) of the New Act on the Protection of Personal Information, as applied mutatis mutandis with the replacement of terms pursuant to Article 26-2, paragraph (2) of the New Act on the Protection of Personal Information, apply to cases in which a business handling information related to personal information provides information related to personal information, on or after the Effective Date, to a third party in a foreign country prescribed in Article 24, paragraph (3) of the New Act on the Protection of Personal Information.
新個人情報保護法第二十六条の二第二項において読み替えて準用する新個人情報保護法第二十四条第三項の規定は、個人関連情報取扱事業者が施行日以後に個人関連情報を同項に規定する外国にある第三者に提供した場合について適用する。
Supplementary Provisions, Article 6Transitional Measures Concerning Covered Businesses of Certified Personal Information Protection Organizations
第六条（認定個人情報保護団体の対象事業者に関する経過措置）
With regard to a business handling personal or other related information that is actually a member of a certified personal information protection organization at the time this Act comes into effect, the provisions of Article 51, paragraph (1) of the New Act on the Protection of Personal Information apply by deeming the consent referred to in that paragraph to have been given on the Effective Date.
この法律の施行の際現に認定個人情報保護団体の構成員である個人情報取扱事業者等については、施行日において新個人情報保護法第五十一条第一項の同意があったものとみなして、同項の規定を適用する。
Supplementary Provisions, Article 8Transitional Measures Concerning the Application of Penal Provisions
第八条（罰則の適用に関する経過措置）
With regard to the application of penal provisions to acts committed before this Act (or, for the provisions set forth in Article 1, item (ii) of the Supplementary Provisions, those provisions) comes into effect, the provisions then in force continue to govern.
この法律（附則第一条第二号に掲げる規定にあっては、当該規定）の施行前にした行為に対する罰則の適用については、なお従前の例による。
Supplementary Provisions, Article 9Delegation to Cabinet Order
第九条（政令への委任）
Beyond what is provided for in these Supplementary Provisions, transitional measures necessary for the enforcement of this Act are specified by Cabinet Order.
この附則に定めるもののほか、この法律の施行に関し必要な経過措置は、政令で定める。
Supplementary Provisions, Article 10Review
第十条（検討）
The government is to, with a target of three years after this Act comes into effect, review the status of enforcement of the New Act on the Protection of Personal Information, taking into consideration the international trends concerning the protection of personal information, the advancement of information and communications technology, the status of the creation and development of new industries utilizing personal information that accompany that advancement, and other such circumstances, and, when it finds it necessary, is to take required measures based on the results of that review.