①As prescribed by Cabinet Order, a person that concludes a contract with an administrative organ's head or administrative entity for the use of anonymized personal information an administrative entity holds, pursuant to the provisions of Article 115, must pay a fee specified by Cabinet Order in consideration of the actual cost.

②As prescribed by Cabinet Order, a person that concludes a contract with an administrative organ's head or administrative entity for the use of anonymized personal information an administrative entity holds, pursuant to the provisions of Article 115 as applied mutatis mutandis pursuant to paragraph (2) of the preceding Article, must pay a fee prescribed by Cabinet Order in consideration of the amount of the fee prescribed by Cabinet Order as provided for in the preceding paragraph.

③As prescribed by local ordinance, a person that concludes a contract with a local government organ for the use of anonymized personal information an administrative entity holds, pursuant to the provisions of Article 115, must pay a fee prescribed by local ordinance based on the amount prescribed by Cabinet Order in consideration of the actual cost.

④As prescribed by local ordinance, a person that concludes a contract with a local government organ for the use of anonymized personal information an administrative entity holds, pursuant to the provisions of Article 115 as applied mutatis mutandis pursuant to paragraph (2) of the preceding Article, must pay a fee specified by local ordinance based on the amount prescribed by Cabinet Order in consideration of the amount of the fee specified by Cabinet Order as provided for in the preceding paragraph.

⑤A person that concludes a contract with an incorporated administrative agency or other prescribed corporation for the use of anonymized personal information an administrative entity holds, pursuant to the provisions of Article 115 (including as applied mutatis mutandis pursuant to the provisions of paragraph (2) of the preceding Article; hereinafter that applies in paragraph (8) and the following Article), must pay a usage fee, as prescribed by the incorporated administrative agency or other prescribed corporation.

⑥An incorporated administrative agency or other prescribed corporation specifies the amount of the usage fee referred to in the preceding paragraph within a range which is found to be reasonable in consideration of the actual cost.

⑦The incorporated administrative agency or other prescribed corporation must make the rules under the preceding two paragraphs available for general inspection.

⑧A person that concludes a contract with a local incorporated administrative agency for the use of anonymized personal information an administrative entity holds, pursuant to the provisions of Article 115, must pay a fee specified by the local incorporated administrative agency.

⑨A local incorporated administrative agency specifies the amount of the fee referred to in the preceding paragraph in consideration of the actual cost and the amount of the fee set forth in local ordinance as provided for in paragraph (3) or paragraph (4).

⑩The local incorporated administrative agency must make the rules under the preceding two paragraphs available for general inspection.

If a person that has concluded a contract for the use of anonymized personal information an administrative entity holds, pursuant to the provisions of Article 115, falls under one of the following items, the administrative organ's head or administrative entity may cancel the contract:

①Except cases based on laws and regulations, in handling anonymized personal information an administrative entity holds, the administrative organ's head or administrative entity must not collate that anonymized personal information with other information in order to identify a person identifiable by personal information that was used to prepare that anonymized personal information.

②An administrative organ's head or administrative entity must take necessary measures for proper management of the anonymized personal information the administrative entity holds, deleted information prescribed in Article 109, paragraph (4), and information on the method of the processing as performed under Article 116, paragraph (1) (hereinafter referred to as "anonymized personal information and other related information of an administrative entity" in this Article and the following Article), in accordance with the criteria specified by Order of the Personal Information Protection Commission as necessary for preventing the leaking of anonymized personal information and other related information of an administrative entity.

③The provisions of the preceding two paragraphs apply mutatis mutandis if an administrative entity entrusts (including entrustment via two or more layers) a person to handle anonymized personal information and other related information of the administrative entity, and that person performs those entrusted activities.

An employee or former employee of an administrative entity handling anonymized personal information and other related information of the administrative entity, a person engaged in or formerly engaged in the entrusted activities referred to in paragraph (3) of the preceding Article, or a staffing agency worker or former staffing agency worker that handles anonymized personal information and other related information of an administrative entity must not disclose anonymized personal information and other related information of an administrative entity acquired in the course of that person's work to other persons without reason, or use that information for an unjust purpose.

①Except cases based on laws and regulations, before providing anonymized personal information (excluding anonymized personal information an administrative entity holds; hereinafter the same applies in this Article) to a third party, an administrative entity must disclose the categories of information on an individual that is contained in anonymized personal information it will provide to the third party, and the means of providing this, and state to that third party explicitly to the effect that the information it will provide is anonymized personal information, pursuant to Order of the Personal Information Protection Commission.

②Except cases based on laws and regulations, in handling anonymized personal information, an administrative entity must neither obtain information relating to the identifier or the equivalent, individual identification codes, or information on the method of processing as performed under Article 43, paragraph (1) that has been deleted from the personal information, nor collate that anonymized personal information with other information, in order to identify a person identifiable by the personal information that was used to prepare the anonymized personal information.

③An administrative entity must take necessary measures for proper management of the anonymized personal information in accordance with the criteria specified by Order of the Personal Information Protection Commission as necessary for preventing the leaking of anonymized personal information.

④The provisions of the preceding two paragraphs apply mutatis mutandis if an administrative entity entrusts (including entrustment via two or more layers) a person to handle its anonymized personal information and that person performs those entrusted activities.

①The provisions of Section 4 do not apply to personal information an administrative entity holds in relation to a judgment in a criminal case or juvenile protection case, a disposition executed by a public prosecutor, a public prosecutor's assistant officer, or judicial police personnel, execution of a punishment or protective measure, post-incarceration rehabilitation services, or pardon (limited to personal information an administrative entity holds in relation to a person on whom that judgment or measure was delivered, a person towards whom the punishment or protective measure was executed, a person who applied for post-incarceration rehabilitation services, or a person who filed a petition for pardon).

②Of the personal information an administrative entity holds (limited to information recorded in administrative or similar documents that exclusively contain the non-disclosure information prescribed in Article 5 of the Administrative Organs Information Disclosure Act, in Article 5 of the Administrative Organs Information Disclosure Act, or in the information disclosure ordinance), information that has yet to be classified or otherwise put in order and from which it is extremely difficult to retrieve particular personal information the administrative entity holds due to the existence of a very large amount of information relating to the same purpose of use is deemed as not being held by the administrative entity with respect to application of the provisions of Section 4 (excluding Subsection 4).

①The provisions of this Chapter (excluding Section 1; Article 66, paragraph (1) as applied mutatis mutandis in paragraph (2) of that Article (limited to the part relating to items (iv) and (v) (limited to the part relating to item (iv) of that paragraph)); Article 75; the preceding two Sections; paragraph (2) of the preceding Article; and Article 127), Article 176, Article 180 (excluding the part relating to business prescribed in Article 66, paragraph (2), items (iv) and (v) (limited to the part relating to item (iv) of that paragraph)), and Article 181 do not apply to the handling of personal information, pseudonymized personal information or information related to personal information by a person set forth in one of those items of Article 58, paragraph (2) in the business prescribed in those items.

②In cases of the handling of personal information or anonymized personal information by a person set forth in one of the items of Article 58, paragraph (1), a person set forth in item (i) of that paragraph is deemed to be an incorporated administrative agency or other prescribed corporation; a person set forth in item (ii) of that paragraph is deemed to be a local incorporated administrative agency; and the provisions of Section 1, Article 75, the preceding two Sections, paragraph (2) of the preceding Article, Article 127, and the following Chapter through Chapter 8 (excluding Article 176, Article 180 and Article 181) apply.

③To apply the provisions of Article 98 to a person set forth in one of the items of paragraph (1) and (2) of Article 58 (limited to cases in which business prescribed in one of the items of that paragraph is conducted), the phrase "is held in violation of Article 61, paragraph (2), is handled in violation of Article 63, is acquired in violation of Article 64, or is used in violation of Article 69, paragraphs (1) and (2)" in paragraph (1), item (i) of that Article is deemed to be replaced with "is held in violation of Article 18 or Article 19, or is obtained in violation of Article 20"; and the term "Article 69, paragraph (1) and (2) or Article 71, paragraph (1)" in item (ii) of that paragraph is deemed to be replaced with "Article 27, paragraph (1) or Article 28".

The head of an administrative organ may delegate the authority or processes prescribed in Section 2 through the preceding Section (excluding Article 74 and Section 4, Subsection 4) to employees of that administrative organ, pursuant to Cabinet Order (or in the case of an organ established under the jurisdiction of the Cabinet o in the case of the Board of Audit, pursuant to an order of those organs).

In order to allow a person that intends to make a request for disclosure, a request for correction, a request for ceasing to use personal information, or a proposal under Article 112, paragraph (1) or Article 118, paragraph (1) (hereinafter referred to as a "request or proposal" in this Article) to make that request or proposal easily and appropriately, an administrative organ's head or administrative entity is to provide information that contributes to specifying the personal information held by the administrative entity to which the head or entity in question belongs, and is also to take other adequate measures in consideration of convenience for the person that intends to make the request or proposal.

An administrative organ's head or administrative entity must endeavor to properly and expeditiously process a complaint on the handling of personal information, pseudonymized personal information or anonymized personal information in that administrative entity.

When implementing measures referred to in Section 3 of Chapter III, a local government organ may consult a council or other collegial body as prescribed by local ordinance, if it is found necessary to hear the opinion based on expertise in order to ensure the proper handling of personal information.