A recipient is to use or provide received identity confirmation information, etc. within the scope necessary for the performance of the affairs that the recipient processes and for which the recipient is permitted, as provided for in this Act, to request the provision of identity confirmation information, etc. (meaning identity confirmation information or a resident record code; the same applies in paragraph (2) and paragraph (3) of the following Article) in connection with the processing of those affairs, and must not use or provide all or part of the received identity confirmation information, etc. for a purpose other than the processing of those affairs.

①An official or former official of a municipality or a prefecture who is engaged in affairs concerning the computer processing, etc. of identity confirmation information that the mayor of the municipality or another executive body of the municipality, or the prefectural governor or another executive body of the prefecture, has received the provision of pursuant to Article 30-10 through Article 30-14, Article 30-15, paragraph (2), or Article 30-15-2, paragraph (1) or (3), must not divulge any secret concerning identity confirmation information, or any secret concerning the computer processing, etc. of identity confirmation information, that the person has come to know in connection with those affairs.

②An official or former official of an organ of the State listed in the left-hand column of Appended Table 1, an officer or employee of a juridical person listed in that column or a person who held such a position, an officer or employee of a handler of quasi-statutory work or a person who held such a position, or an official or former official of the Digital Agency, who is engaged in affairs concerning the computer processing, etc. of identity confirmation information, etc. that the organ of the State, juridical person, or handler of quasi-statutory work listed in that column, or the Digital Agency, has received the provision of pursuant to Article 30-9, Article 30-9-2, or Article 30-15-2, paragraph (1), must not divulge any secret concerning identity confirmation information, etc., or any secret concerning the computer processing, etc. of identity confirmation information, etc., that the person has come to know in connection with those affairs.

③A person who has received entrustment (including entrustment through two or more tiers) from a recipient of the computer processing, etc. of received identity confirmation information, etc., or an officer or employee of that person, or a person who was such a person, an officer, or an employee, must not divulge any secret concerning identity confirmation information, etc., or any secret concerning the computer processing, etc. of identity confirmation information, etc., that the person has come to know in connection with that entrusted work.

A person who is or was engaged in affairs concerning the computer processing, etc. of received identity confirmation information, etc., carried out under entrustment from a recipient (including entrustment through two or more tiers), must not wantonly disclose to another person any matter learned in connection with those affairs, or use it for a wrongful purpose.

①Any person may request the prefectural governor or the Agency to disclose, in writing, the identity confirmation information pertaining to the person that is recorded on a magnetic disk under Article 30-6, paragraph (3) or Article 30-7, paragraph (3) (such "disclosure" includes, where no identity confirmation information pertaining to the person exists, notifying the person to that effect; the same applies below).

②If there has been a request for disclosure under the preceding paragraph (hereinafter referred to in this paragraph and Article 30-33, paragraph (1) as a "request for disclosure"), the prefectural governor or the Agency must disclose, in writing, to the person who made the request for disclosure (hereinafter referred to in this paragraph and Article 30-33, paragraph (2) as the "person requesting disclosure") the identity confirmation information pertaining to that request for disclosure; provided, however, that if the person requesting disclosure consents, the disclosure may be made by a method other than in writing.

①The disclosure under paragraph (2) of the preceding Article must be made within thirty days from the day on which the request for disclosure was accepted.

②If the prefectural governor or the Agency is unable to make the disclosure within the period prescribed in the preceding paragraph due to difficulty in the administration of affairs or other justifiable grounds, the prefectural governor or the Agency must, within the period prescribed in that paragraph, notify the person requesting disclosure in writing of the reason why the disclosure cannot be made within the period set forth in that paragraph and of the time limit for the disclosure.

A person who requests the Agency to disclose the identity confirmation information pertaining to the person under Article 30-32, paragraph (1) must pay a fee in the amount specified by the Agency with the approval of the Minister for Internal Affairs and Communications.

If a person who has received disclosure under Article 30-32, paragraph (2) makes a request in writing for the correction, addition, or deletion of all or part of the content of the identity confirmation information pertaining to the disclosure, the prefectural governor or the Agency is to promptly conduct an investigation and notify the person who made the request of the result in writing.

The prefectural governor or the Agency must endeavor to appropriately and promptly handle complaints concerning the implementation of the affairs processed by the prefecture under the provisions of this Act (excluding Chapter III and the following Chapter) or the identity confirmation information processing work.

①Except where necessary for the performance of affairs under the provisions of this Act, the mayor of the municipality must not demand that any person notify the mayor of a resident record code entered on a certificate of residence pertaining to a person other than a resident of that municipality.

②Except where necessary for the performance of affairs under the provisions of this Act, the prefectural governor must not demand that any person notify the prefectural governor of a resident record code entered on a certificate of residence pertaining to that person or a person other than that person.

③Except where necessary for the performance of affairs that the Agency is to process under the provisions of this Act, the Agency must not demand that any person notify the Agency of a resident record code entered on a certificate of residence pertaining to that person or a person other than that person.

④Except where necessary for the performance of affairs that the Ministry of Internal Affairs and Communications processes and for which it is permitted, as provided for by this Act, to request the provision of a resident record code in connection with the processing of those affairs, the Ministry of Internal Affairs and Communications must not demand that any person notify the Ministry of Internal Affairs and Communications of a resident record code entered on a certificate of residence pertaining to that person or a person other than that person.

①No person other than the mayor of a municipality, the prefectural governor, the Agency, or the Ministry of Internal Affairs and Communications (hereinafter referred to in this Article as "municipal mayors, etc.") may demand that a person other than a person belonging to the same household as that person (hereinafter referred to in this Article as a "third party") notify that person of a resident record code entered on a certificate of residence pertaining to that third party or to a person other than that third party.

②No person other than municipal mayors, etc. may, in connection with an act that the person carries out in the course of business, demand that a third party who intends to make, or who makes, an offer to the person for a sale, a lease, an employment, or any other contract (hereinafter referred to in this paragraph as a "contract"), or a third party who has concluded a contract with the person, notify the person of a resident record code entered on a certificate of residence pertaining to that third party or to a person other than that third party.

③No person other than municipal mayors, etc. may, in the course of business, compile a database (meaning a collection of information concerning a third party, including a resident record code entered on a certificate of residence pertaining to that third party, that is systematically organized so that such information can be searched for using a computer; the same applies below in this paragraph) in which resident record codes are recorded, where the information recorded in that database is scheduled to be provided to another person.

④If an act in violation of the preceding two paragraphs has been committed, and the prefectural governor finds that there is a risk that the person who committed that act will further and repeatedly commit an act in violation of those provisions, the prefectural governor may recommend that the person who committed that act discontinue that act, or recommend that the person take the measures necessary to ensure that act is discontinued.

⑤If a person who has received a recommendation under the preceding paragraph does not comply with the recommendation, the prefectural governor may, after hearing the opinion of the prefectural council prescribed in Article 30-40, paragraph (1), set a time limit and order that person to comply with the recommendation.

①If the prefectural governor finds it necessary in connection with measures under paragraph (4) or paragraph (5) of the preceding Article, the prefectural governor may, to the extent found necessary, require a person for whom there is a reasonable ground sufficient to find that the person is in violation of paragraph (2) or paragraph (3) of that Article to report on necessary matters, or have the prefectural governor's official enter the office or place of business of a person for whom there is a reasonable ground sufficient to find that the person is in violation of those provisions, and inspect the books, documents, and other articles.

②An official who conducts an on-site inspection under the preceding paragraph must carry a certificate showing the official's identity, and must present it if requested by a person concerned.

③The authority to conduct on-site inspections under paragraph (1) must not be construed as being vested for criminal investigation.

①A council concerning the protection of identity confirmation information pertaining to a notification under Article 30-6, paragraph (1) (hereinafter referred to in this Article as the "prefectural council") is established in the prefecture.

②The prefectural council, in addition to investigating and deliberating on matters placed under its authority by the provisions of this Act (excluding the following Chapter), may, in response to consultation by the prefectural governor, investigate and deliberate on matters concerning the protection of identity confirmation information pertaining to a notification under Article 30-6, paragraph (1) in the relevant prefecture, and make recommendations to the prefectural governor concerning those matters.

③The necessary matters concerning the organization and operation of the council of the prefecture are specified by Prefectural Ordinance.