Article 30-28Ensuring the Security of Identity Confirmation Information, etc. by a Recipient, etc.
第三十条の二十八（受領者等による本人確認情報等の安全確保）
When the mayor of a municipality or another executive body of a municipality, the prefectural governor or another executive body of a prefecture, an organ of the State or a juridical person or a handler of quasi-statutory work listed in the left-hand column of Appended Table 1, that has received the provision of identity confirmation information pursuant to Article 30-9, Article 30-10 through Article 30-14, Article 30-15, paragraph (2), or Article 30-15-2, paragraph (1) or (3), or the Digital Agency that has received the provision of a resident record code pursuant to Article 30-9-2 (hereinafter referred to as a "recipient"), carries out the computer processing, etc. of the identity confirmation information or resident record code that it has received the provision of pursuant to these provisions (hereinafter referred to as "received identity confirmation information, etc."), the recipient must take the measures necessary for the prevention of leakage, loss and damage of the received identity confirmation information, etc. and for other appropriate management of that received identity confirmation information, etc.
第三十条の九、第三十条の十から第三十条の十四まで、第三十条の十五第二項若しくは第三十条の十五の二第一項若しくは第三項の規定により本人確認情報の提供を受けた市町村長その他の市町村の執行機関、都道府県知事その他の都道府県の執行機関若しくは別表第一の上欄に掲げる国の機関若しくは法人若しくは準法定事務処理者又は第三十条の九の二の規定により住民票コードの提供を受けたデジタル庁（以下「受領者」という。）がこれらの規定により提供を受けた本人確認情報又は住民票コード（以下「受領した本人確認情報等」という。）の電子計算機処理等を行うに当たつては、受領者は、受領した本人確認情報等の漏えい、滅失及び毀損の防止その他の当該受領した本人確認情報等の適切な管理のために必要な措置を講じなければならない。
The provisions of the preceding paragraph apply mutatis mutandis to the case where a person who has received entrustment (including entrustment through two or more tiers) from a recipient of the computer processing, etc. of received identity confirmation information, etc. performs the entrusted work.
前項の規定は、受領者から受領した本人確認情報等の電子計算機処理等の委託（二以上の段階にわたる委託を含む。）を受けた者が受託した業務を行う場合について準用する。