Article 32Disclosure of Information about the Personal Data a Business Holds
第三十二条(保有個人データに関する事項の公表等)
Businesses handling personal information must make the following information about the personal data they hold accessible to identifiable persons (making that information accessible includes providing answers without delay as requested by identifiable persons):
the name and address of the business handling personal information, and if it is a corporation, the name of its representative;
当該個人情報取扱事業者の氏名又は名称及び住所並びに法人にあっては、その代表者の氏名
the purpose of use of all personal data the business holds (excluding cases falling under Article 21, paragraph (4), items (i) through (iii));
全ての保有個人データの利用目的(第二十一条第四項第一号から第三号までに該当する場合を除く。)
the procedures for responding to a request under the following paragraph, or to a request under paragraph (1) of the following Article (including as applied mutatis mutandis pursuant to paragraph (5) of that Article); Article 34, paragraph (1); or Article 35, paragraph (1), paragraph (3), or paragraph (5) (including the amount of the fee, if one is set pursuant to the provisions of Article 38, paragraph (2));
beyond what is set forth in the preceding three items, those prescribed by Cabinet Order as matters necessary to ensure the proper handling of personal data the business holds.
If an identifiable person requests that a business handling personal information notify that person of the purpose of use of the personal data the business holds that can be used to identify that person, the business must notify the person of this without delay; provided, however, that this does not apply in a case falling under one of the following items:
the purpose of use of the personal data the business holds that can be used to identify the identifiable person has been made clear pursuant to the provisions of the preceding paragraph;
cases falling under Article 21, paragraph (4), items (i) through (iii).
第二十一条第四項第一号から第三号までに該当する場合
If a business handling personal information decides not to notify the identifiable person of the purpose of use of the personal data the business holds as requested pursuant to the preceding paragraph, the business must notify the identifiable person of this without delay.