Article 66Measures for Managing the Security of Personal Information an Administrative Entity Holds
第六十六条（安全管理措置）
An administrative organ's head or administrative entity must take necessary and appropriate measures for managing the security of personal information the administrative entity holds, preventing its leaking, loss or damage.
The provisions of the preceding paragraph apply mutatis mutandis to cases in which a person set forth in each following item handles personal information in conducting services as prescribed in each item respectively:
a person entrusted by an administrative entity with the handling of personal information:that entrusted service;
a designated administrator (meaning a designated administrator prescribed in Article 244-2, paragraph (3) of the Local Autonomy Act (Act No. 67 of 1947)):management service of a public facility (meaning a public facility prescribed in Article 244, paragraph (1) of that Act);
指定管理者（地方自治法（昭和二十二年法律第六十七号）第二百四十四条の二第三項に規定する指定管理者をいう。） 公の施設（同法第二百四十四条第一項に規定する公の施設をいう。）の管理の業務
a person set forth in each item of Article 58, paragraph (1):service which is conducted based on laws and regulations and specified by Cabinet Order;
第五十八条第一項各号に掲げる者 法令に基づき行う業務であって政令で定めるもの
a person set forth in each item of Article 58, paragraph (2):business prescribed in each item of that paragraph which is conducted based on laws and regulations and specified by Cabinet Order;
a person entrusted by a person set forth in each preceding item with service prescribed in each item (including entrustment via two or more layers):that entrusted service.
前各号に掲げる者から当該各号に定める業務の委託（二以上の段階にわたる委託を含む。）を受けた者 当該委託を受けた業務