Section 2 Supervision and Monitoring
第二節 監督及び監視
Subsection 1 Supervision of Businesses Handling Personal or Other Related Information
第一款 個人情報取扱事業者等の監督
Article 146Reports and On-Site Inspections
第百四十六条（報告及び立入検査）
The Commission may require a business handling personal information, a business handling pseudonymized personal information, a business handling anonymized personal information, a business handling information related to personal information (hereinafter referred to as a "business handling personal or other related information" in this Subsection), or other concerned person to submit necessary information or material relating to the handling of personal information, pseudonymized personal information, anonymized personal information, or information related to personal information (hereinafter referred to as "personal or other related information" in this Subsection and Subsection 3), or have its officials enter a business office or other necessary place of a business handling personal or other related information or other concerned person, inquire about the handling of personal or other related information, or inspect a book, document, or other item, to the extent necessary to implement the provisions of Chapter IV (excluding Section 5; the same applies in the following Article and Article 151).
委員会は、第四章（第五節を除く。次条及び第百五十一条において同じ。）の規定の施行に必要な限度において、個人情報取扱事業者、仮名加工情報取扱事業者、匿名加工情報取扱事業者又は個人関連情報取扱事業者（以下この款において「個人情報取扱事業者等」という。）その他の関係者に対し、個人情報、仮名加工情報、匿名加工情報又は個人関連情報（以下この款及び第三款において「個人情報等」という。）の取扱いに関し、必要な報告若しくは資料の提出を求め、又はその職員に、当該個人情報取扱事業者等その他の関係者の事務所その他必要な場所に立ち入らせ、個人情報等の取扱いに関し質問させ、若しくは帳簿書類その他の物件を検査させることができる。
An official who conducts an on-site inspection pursuant to the provisions of the preceding paragraph must carry a certificate for identification, and present it when requested by a person concerned.
前項の規定により立入検査をする職員は、その身分を示す証明書を携帯し、関係人の請求があったときは、これを提示しなければならない。
An on-site inspection authority under paragraph (1) must not be construed as granted for a criminal investigation.
第一項の規定による立入検査の権限は、犯罪捜査のために認められたものと解釈してはならない。
Article 147Guidance and Advice
第百四十七条（指導及び助言）
The Commission may provide a business handling personal or other related information with necessary guidance and advice on the handling of personal or other related information, to the extent necessary to implement the provisions of Chapter IV.
委員会は、第四章の規定の施行に必要な限度において、個人情報取扱事業者等に対し、個人情報等の取扱いに関し必要な指導及び助言をすることができる。
Article 148Recommendations and Orders
第百四十八条（勧告及び命令）
The Commission may recommend a business handling personal or other related information to stop committing the following violations or take other necessary measures to rectify the violation, if the Commission finds that there is a need for protecting individual rights and interests in cases in which a business handling personal information has violated the provisions of Articles 18 through 20, Article 21 (including the cases in which the provisions of paragraphs (1), (3) and (4) are applied pursuant to the Article 41, paragraph (4) following the deemed replacement of terms), Articles 23 through 26, Article 27 (excluding paragraph (4), and including the cases in which the provisions of paragraphs (5) and (6) are applied pursuant to Article 41, paragraph (6) following the deemed replacement of terms), Article 28, Article 29 (including the cases in which the provisions of the proviso of paragraph (1) are applied pursuant to Article 41, paragraph (6) following the deemed replacement of terms), Article 30 (excluding paragraph (2), and including the cases in which the provisions of the proviso of paragraph (1) are applied pursuant to Article 41, paragraph (6) following the deemed replacement of terms), Article 32, Article 33 (excluding paragraph (1) (including as applied mutatis mutandis pursuant to paragraph (5))), Article 34, paragraph (2) or paragraph (3), Article 35 (excluding paragraphs (1), (3) and (5)), Article 38, paragraph (2), Article 41 (excluding paragraphs (4) and (5)) or Article 43 (excluding paragraph (6)); in cases in which a business handling information related to personal information has violated the provisions of Article 31, paragraph (1), has violated the provisions of Article 28, paragraph (3) as applied mutatis mutandis pursuant to Article 31, paragraph (2) following the deemed replacement of terms, or has violated the provisions of Article 30, paragraph (3) or paragraph (4) as applied mutatis mutandis pursuant to Article 31, paragraph (3) following the deemed replacement of terms; in cases in which a business handling pseudonymized personal information has violated the provisions of Article 42, paragraph (1), has violated Article 27, paragraph (5) or paragraph (6) as applied mutatis mutandis pursuant to Article 42, paragraph (2) following the deemed replacement of terms, or has violated the provisions of Articles 23 through 25 or Article 41, paragraph (7) or paragraph (8) as applied mutatis mutandis pursuant to Article 42, paragraph (3) following the deemed replacement of terms; or in cases in which a business handling anonymized personal information has violated the provisions of Article 44 or Article 45.
委員会は、個人情報取扱事業者が第十八条から第二十条まで、第二十一条（第一項、第三項及び第四項の規定を第四十一条第四項の規定により読み替えて適用する場合を含む。）、第二十三条から第二十六条まで、第二十七条（第四項を除き、第五項及び第六項の規定を第四十一条第六項の規定により読み替えて適用する場合を含む。）、第二十八条、第二十九条（第一項ただし書の規定を第四十一条第六項の規定により読み替えて適用する場合を含む。）、第三十条（第二項を除き、第一項ただし書の規定を第四十一条第六項の規定により読み替えて適用する場合を含む。）、第三十二条、第三十三条（第一項（第五項において準用する場合を含む。）を除く。）、第三十四条第二項若しくは第三項、第三十五条（第一項、第三項及び第五項を除く。）、第三十八条第二項、第四十一条（第四項及び第五項を除く。）若しくは第四十三条（第六項を除く。）の規定に違反した場合、個人関連情報取扱事業者が第三十一条第一項、同条第二項において読み替えて準用する第二十八条第三項若しくは第三十一条第三項において読み替えて準用する第三十条第三項若しくは第四項の規定に違反した場合、仮名加工情報取扱事業者が第四十二条第一項、同条第二項において読み替えて準用する第二十七条第五項若しくは第六項若しくは第四十二条第三項において読み替えて準用する第二十三条から第二十五条まで若しくは第四十一条第七項若しくは第八項の規定に違反した場合又は匿名加工情報取扱事業者が第四十四条若しくは第四十五条の規定に違反した場合において個人の権利利益を保護するため必要があると認めるときは、当該個人情報取扱事業者等に対し、当該違反行為の中止その他違反を是正するために必要な措置をとるべき旨を勧告することができる。
If a business handling personal or other related information has received a recommendation under the preceding paragraph but has not taken measures in line with the recommendation without legitimate grounds, and the Commission finds that a serious infringement of individual rights and interests is impending, the Commission may order the business handling personal or other related information to take measures in line with the recommendation.
委員会は、前項の規定による勧告を受けた個人情報取扱事業者等が正当な理由がなくてその勧告に係る措置をとらなかった場合において個人の重大な権利利益の侵害が切迫していると認めるときは、当該個人情報取扱事業者等に対し、その勧告に係る措置をとるべきことを命ずることができる。
Notwithstanding the provisions of the preceding two paragraphs, the Commission may order a business handling personal or other related information to stop the following violations or take other necessary measures to rectify the violation, if the Commission finds that there is a need to take urgent measures because there is a fact that seriously prejudices individual rights and interests in cases in which a business handling personal information has violated the provisions of Articles 18 through 20, Articles 23 through 26, Article 27, paragraph (1), Article 28, paragraph (1) or paragraph (3), Article 41, paragraphs (1) through (3), or paragraphs (6) through (8), or Article 43, paragraph (1), paragraph (2) or paragraph (5); in cases in which a business handling information related to personal information has violated the provisions of Article 31, paragraph (1), or has violated the provisions of Article 28, paragraph (3) as applied mutatis mutandis pursuant to Article 31, paragraph (2) following the deemed replacement of terms; in cases in which a business handling pseudonymized personal information has violated the provisions of Article 42, paragraph (1), or has violated the provisions of Articles 23 through 25 or Article 41, paragraph (7) or paragraph (8) as applied mutatis mutandis pursuant to Article 42, paragraph (3) following the deemed replacement of terms; or in cases in which a business handling anonymized personal information has violated the provisions of Article 45.
委員会は、前二項の規定にかかわらず、個人情報取扱事業者が第十八条から第二十条まで、第二十三条から第二十六条まで、第二十七条第一項、第二十八条第一項若しくは第三項、第四十一条第一項から第三項まで若しくは第六項から第八項まで若しくは第四十三条第一項、第二項若しくは第五項の規定に違反した場合、個人関連情報取扱事業者が第三十一条第一項若しくは同条第二項において読み替えて準用する第二十八条第三項の規定に違反した場合、仮名加工情報取扱事業者が第四十二条第一項若しくは同条第三項において読み替えて準用する第二十三条から第二十五条まで若しくは第四十一条第七項若しくは第八項の規定に違反した場合又は匿名加工情報取扱事業者が第四十五条の規定に違反した場合において個人の重大な権利利益を害する事実があるため緊急に措置をとる必要があると認めるときは、当該個人情報取扱事業者等に対し、当該違反行為の中止その他違反を是正するために必要な措置をとるべきことを命ずることができる。
If the Commission has issued an order under the preceding two paragraphs and the business handling personal or other related information that has received the order has violated the order, the Commission may make public announcement to that effect.
委員会は、前二項の規定による命令をした場合において、その命令を受けた個人情報取扱事業者等がその命令に違反したときは、その旨を公表することができる。
Article 149Restriction on the Commission's Exercising the Authority
第百四十九条（委員会の権限の行使の制限）
When requiring a business handling personal or other related information to submit a report or material, conducting its on-site inspection, or giving a guidance, advice, recommendation or order to it, pursuant to the provisions of the preceding three Articles, the Commission must not preclude the freedom of expression, freedom of academia, freedom of religion, and freedom of political activity.
委員会は、前三条の規定により個人情報取扱事業者等に対し報告若しくは資料の提出の要求、立入検査、指導、助言、勧告又は命令を行うに当たっては、表現の自由、学問の自由、信教の自由及び政治活動の自由を妨げてはならない。
In light of the purport of the provisions of the preceding paragraph, the Commission is not to exercise its authority when a business handling personal or other related information provides personal or other related information to a person set forth in one of the items of Article 57, paragraph (1) (limited to cases in which the person handles personal or other related information for the purpose prescribed in those items).
前項の規定の趣旨に照らし、委員会は、個人情報取扱事業者等が第五十七条第一項各号に掲げる者（それぞれ当該各号に定める目的で個人情報等を取り扱う場合に限る。）に対して個人情報等を提供する行為については、その権限を行使しないものとする。
Article 150Delegation of the Authority
第百五十条（権限の委任）
If the Commission finds that there is a need for effectively giving a business handling personal or other related information a recommendation under Article 148, paragraph (1) or order under Article 148, paragraph (2) or paragraph (3) because there is a need to urgently and intensively ensure the proper handling of personal or other related information or similar other circumstances prescribed by Cabinet Order, the Commission may delegate an authority under Article 26, paragraph (1); under Article 146, paragraph (1); under Article 100, paragraph (1), Article 101, Article 102-2, Article 103, Article 105, Article 106 or Article 108 of the Code of Civil Procedure (Act No. 109 of 1996) as applied mutatis mutandis pursuant to the provisions of Article 162 following the deemed replacement of terms; under Article 163; and under Article 164 to the competent minister for the business, as prescribed by Cabinet Order.
When having exercised an authority delegated pursuant to the provisions of the preceding paragraph, the competent minister for the business is to report its results to the Commission as prescribed by Cabinet Order.
The competent minister for the business may delegate all or part of an authority delegated pursuant to the provisions of paragraph (1) or all or part of an authority under the preceding paragraph to the head of a local branch bureau under Article 43 of the Act for Establishment of the Cabinet Office or other bureau or organ prescribed by Cabinet Order, pursuant to the provisions of Cabinet Order.
The Prime Minister delegates an authority delegated pursuant to the provisions of paragraph (1) and an authority under paragraph (2) (limited to those relating to the Financial Services Agency's jurisdiction and excluding those prescribed by Cabinet Order) to the Commissioner of the Financial Services Agency.
The Commissioner of the Financial Services Agency may delegate a part of an authority delegated pursuant to the provisions of the preceding paragraph to the Securities and Exchange Surveillance Commission, pursuant to the provisions of Cabinet Order.
金融庁長官は、政令で定めるところにより、前項の規定により委任された権限について、その一部を証券取引等監視委員会に委任することができる。
The Commissioner of the Financial Services Agency may delegate a part of an authority delegated pursuant to the provisions of paragraph (4) (excluding those delegated to the Securities and Exchange Surveillance Commission pursuant to the provisions of the preceding paragraph) to the director-general of a local finance bureau or local finance branch bureau, pursuant to the provisions of Cabinet Order.
The Securities and Exchange Surveillance Commission may delegate a part of an authority delegated pursuant to the provisions of paragraph (5) to the director-general of a local finance bureau or local finance branch bureau, pursuant to the provisions of Cabinet Order.
証券取引等監視委員会は、政令で定めるところにより、第五項の規定により委任された権限の一部を財務局長又は財務支局長に委任することができる。
As for administrative affairs relating to an authority delegated to the director-general of a local finance bureau or local finance branch bureau pursuant to the provisions of the preceding paragraph, the Securities and Exchange Surveillance Commission directs and supervises the director-general of a local finance bureau or local finance branch bureau.
前項の規定により財務局長又は財務支局長に委任された権限に係る事務に関しては、証券取引等監視委員会が財務局長又は財務支局長を指揮監督する。
In the case referred to in paragraph (5), an appeal for review concerning the Securities and Exchange Surveillance Commission's requiring the submission of a report or material (including cases in which the director-general of a local finance bureau or local finance branch bureau does so pursuant to the provisions of paragraph (7)) may only be filed against the Securities and Exchange Surveillance Commission.
Article 151Requests by the Competent Minister for the Business
第百五十一条（事業所管大臣の請求）
If the competent minister for the business finds that a business handling personal or other related information has committed an act violating the provisions of Chapter IV, or there is a need for ensuring the proper handling of personal or other related information by a business handling personal or other related information, the minister may request that the Commission take appropriate measures in accordance with the provisions of this Act.
事業所管大臣は、個人情報取扱事業者等に第四章の規定に違反する行為があると認めるときその他個人情報取扱事業者等による個人情報等の適正な取扱いを確保するために必要があると認めるときは、委員会に対し、この法律の規定に従い適当な措置をとるべきことを求めることができる。
Article 152The Competent Minister for the Business
第百五十二条（事業所管大臣）
The competent minister for the business in the provisions of this Subsection is as follows:
この款の規定における事業所管大臣は、次のとおりとする。
the competent minister for the handling of personal or other related information by a business handling personal or other related information that is relating to employment management is: the Minister of Health, Labor and Welfare (or as for those relating to a mariner's employment management, the Minister of Land, Infrastructure, Transport and Tourism); and a minister having jurisdiction over the business conducted by the business handling personal or other related information, the National Public Safety Commission, or the Japan Casino Regulatory Commission (referred to collectively as the "minister or commission" in the following item);
個人情報取扱事業者等が行う個人情報等の取扱いのうち雇用管理に関するものについては、厚生労働大臣（船員の雇用管理に関するものについては、国土交通大臣）及び当該個人情報取扱事業者等が行う事業を所管する大臣、国家公安委員会又はカジノ管理委員会（次号において「大臣等」という。）
the competent minister for the handling of personal or other related information by a business handling personal or other related information other than the ones set forth in the preceding item is: the minister or commission having jurisdiction over the business conducted by the business handling personal or other related information.
個人情報取扱事業者等が行う個人情報等の取扱いのうち前号に掲げるもの以外のものについては、当該個人情報取扱事業者等が行う事業を所管する大臣等