# 個人情報の保護に関する法律 / Act on the Protection of Personal Information — 第二十六条 (Article 26) - Law: 個人情報の保護に関する法律 (Act on the Protection of Personal Information), 平成十五年法律第五十七号 - English title "Act on the Protection of Personal Information": Ministry of Justice translation - Kind: Act — the distinction between 法律 (Act), 政令 (Cabinet Order), 省令 (Ministerial Order) and 条例 (local ordinance) decides who may issue it and what it may say. - Provision: 第二十六条 (Article 26)（漏えい等の報告等） — address `art-26` - Text in force since: 2026-10-01 - URL (the page that opens at this provision): https://japanlaw.org/en/personal-information-protection-act/art-26 - Permanent URL (e-Gov law ID, never renamed): https://japanlaw.org/l/415AC0000000057/art-26 - Every provision below carries its address and both URLs on the line under it. - Japanese text: e-Gov 法令検索, Digital Agency (デジタル庁). English: as marked on each line below. Only the Japanese as published by the government has legal effect; the text below is a copy of it. Every English rendering below is a translation and says which kind: the Ministry of Justice's translation, or this site's machine translation, whose model and date the Sources list names. They are never merged and never substituted for one another. --- ### 第二十六条（漏えい等の報告等） — (Reporting Leaks) caption: Ministry of Justice translation — Japanese Law Translation Database System art-26 · https://japanlaw.org/en/personal-information-protection-act/art-26 · https://japanlaw.org/l/415AC0000000057/art-26 **第一項** 個人情報取扱事業者は、その取り扱う個人データの漏えい、滅失、毀損その他の個人データの安全の確保に係る事態であって個人の権利利益を害するおそれが大きいものとして個人情報保護委員会規則で定めるものが生じたときは、個人情報保護委員会規則で定めるところにより、当該事態が生じた旨を個人情報保護委員会に報告しなければならない。ただし、当該個人情報取扱事業者が、他の個人情報取扱事業者又は行政機関等から当該個人データの取扱いの全部又は一部の委託を受けた場合であって、個人情報保護委員会規則で定めるところにより、当該事態が生じた旨を当該他の個人情報取扱事業者又は行政機関等に通知したときは、この限りでない。 art-26/par-1 · https://japanlaw.org/en/personal-information-protection-act/art-26/par-1 · https://japanlaw.org/l/415AC0000000057/art-26/par-1 Pursuant to Order of the Personal Information Protection Commission, businesses handling personal information must report leaks, loss or damage and other situations concerning the security of the personal data they handle, which are prescribed by Order of the Personal Information Protection Commission as those likely to harm individual rights and interests, to the Personal Information Protection Commission; provided, however, that this does not apply to cases in which another business handling personal information or administrative entity has entrusted the business in question with all or part of the handling of the personal data, and it has notified that other business handling personal information or administrative entity of the situation as prescribed by Order of the Personal Information Protection Commission. Ministry of Justice translation — Japanese Law Translation Database System **第二項** 前項に規定する場合には、個人情報取扱事業者（同項ただし書の規定による通知をした者を除く。）は、本人に対し、個人情報保護委員会規則で定めるところにより、当該事態が生じた旨を通知しなければならない。ただし、本人への通知が困難な場合であって、本人の権利利益を保護するため必要なこれに代わるべき措置をとるときは、この限りでない。 art-26/par-2 · https://japanlaw.org/en/personal-information-protection-act/art-26/par-2 · https://japanlaw.org/l/415AC0000000057/art-26/par-2 In cases prescribed in the preceding paragraph, businesses handling personal information (excluding those that have given a notice under the proviso of that paragraph) must notify the identifiable person of the occurrence of the situation, pursuant to Order of the Personal Information Protection Commission; provided, however, that this does not apply if it is difficult to notify the identifiable person of that occurrence, and the necessary alternative measures are taken to protect that person's rights and interests. Ministry of Justice translation — Japanese Law Translation Database System --- ## Cites - art-26/par-2: 前項 → 個人情報の保護に関する法律 第二十六条第一項 (Article 26, paragraph (1)), art-26/par-1 — https://japanlaw.org/en/personal-information-protection-act/art-26/par-1 · https://japanlaw.org/l/415AC0000000057/art-26/par-1 ## Cited by 6 provisions cite this one. No official source publishes this direction. - 個人情報の保護に関する法律 第二十六条第二項（漏えい等の報告等） — https://japanlaw.org/en/personal-information-protection-act/art-26/par-2 · https://japanlaw.org/l/415AC0000000057/art-26/par-2 - 個人情報の保護に関する法律 第三十五条第五項（利用停止等） — https://japanlaw.org/en/personal-information-protection-act/art-35/par-5 · https://japanlaw.org/l/415AC0000000057/art-35/par-5 - 個人情報の保護に関する法律 第四十一条第九項（仮名加工情報の作成等） — https://japanlaw.org/en/personal-information-protection-act/art-41/par-9 · https://japanlaw.org/l/415AC0000000057/art-41/par-9 - 個人情報の保護に関する法律 第百四十八条第一項（勧告及び命令） — https://japanlaw.org/en/personal-information-protection-act/art-148/par-1 · https://japanlaw.org/l/415AC0000000057/art-148/par-1 - 個人情報の保護に関する法律 第百四十八条第三項（勧告及び命令） — https://japanlaw.org/en/personal-information-protection-act/art-148/par-3 · https://japanlaw.org/l/415AC0000000057/art-148/par-3 - 個人情報の保護に関する法律 第百五十条第一項（権限の委任） — https://japanlaw.org/en/personal-information-protection-act/art-150/par-1 · https://japanlaw.org/l/415AC0000000057/art-150/par-1 --- ## Sources - e-Gov 法令検索, Digital Agency (デジタル庁) — 個人情報の保護に関する法律 — the text in force from 2026-10-01 (https://laws.e-gov.go.jp/law/415AC0000000057/20261001_507AC0000000070), retrieved 2026-10-10 - Japanese Law Translation Database System, Ministry of Justice (法務省) — Act on the Protection of Personal Information — Ministry of Justice translation (https://www.japaneselawtranslation.go.jp/en/laws/view/4241/tb), retrieved 2026-10-10 - This site's parser, version 190 — 個人情報の保護に関する法律 — structure, counts, cross-references and defined terms, computed 2026-10-10