Article 38-3Ensuring the Security of Specific Personal Information, etc. in Processes Handled by the Agency
第三十八条の三（機構処理事務特定個人情報等の安全確保）
When conducting computer processing, etc. of Specific Personal Information handled in a Process Handled by the Agency and other information specified by Order of the Ministry of Internal Affairs and Communications (referred to as "Specific Personal Information, etc. in Processes Handled by the Agency" in this Article and paragraph (2) of the following Article), the Agency must take necessary measures for the appropriate management of Specific Personal Information, etc. in Processes Handled by the Agency, such as preventing the leakage, loss, or damage of Specific Personal Information, etc. in Processes Handled by the Agency.
The provisions of the preceding paragraph apply mutatis mutandis where a person who has been entrusted by the Agency with the computer processing, etc. of Specific Personal Information, etc. in Processes Handled by the Agency (including entrustment over two or more tiers) performs the entrusted services.
前項の規定は、機構から機構処理事務特定個人情報等の電子計算機処理等の委託（二以上の段階にわたる委託を含む。）を受けた者が受託した業務を行う場合について準用する。