# 個人情報の保護に関する法律 / Act on the Protection of Personal Information — 第六十六条 (Article 66)

- Law: 個人情報の保護に関する法律 (Act on the Protection of Personal Information), 平成十五年法律第五十七号
- English title "Act on the Protection of Personal Information": Ministry of Justice translation
- Kind: Act — the distinction between 法律 (Act), 政令 (Cabinet Order), 省令 (Ministerial Order) and 条例 (local ordinance) decides who may issue it and what it may say.
- Provision: 第六十六条 (Article 66)（安全管理措置） — address `art-66`
- Text in force since: 2026-10-01
- URL (the page that opens at this provision): https://japanlaw.org/ja/personal-information-protection-act/art-66
- Permanent URL (e-Gov law ID, never renamed): https://japanlaw.org/l/415AC0000000057/art-66
- Every provision below carries its address and both URLs on the line under it.
- Japanese text: e-Gov 法令検索, Digital Agency (デジタル庁). English: as marked on each line below.

Only the Japanese as published by the government has legal effect; the text
below is a copy of it. Every English rendering below is a translation and
says which kind: the Ministry of Justice's translation, or this
site's machine translation, whose model and date the Sources list names.
They are never merged and never substituted for one another.

---

### 第六十六条（安全管理措置） — (Measures for Managing the Security of Personal Information an Administrative Entity Holds)
<sup>caption: Ministry of Justice translation — Japanese Law Translation Database System</sup>
<sup>art-66 · https://japanlaw.org/ja/personal-information-protection-act/art-66 · https://japanlaw.org/l/415AC0000000057/art-66</sup>

  **第一項**  行政機関の長等は、保有個人情報の漏えい、滅失又は毀損の防止その他の保有個人情報の安全管理のために必要かつ適切な措置を講じなければならない。
  <sup>art-66/par-1 · https://japanlaw.org/ja/personal-information-protection-act/art-66/par-1 · https://japanlaw.org/l/415AC0000000057/art-66/par-1</sup>
  An administrative organ's head or administrative entity must take necessary and appropriate measures for managing the security of personal information the administrative entity holds, preventing its leaking, loss or damage.
  <sup>Ministry of Justice translation — Japanese Law Translation Database System</sup>

  **第二項**  前項の規定は、次の各号に掲げる者が当該各号に定める業務を行う場合における個人情報の取扱いについて準用する。
  <sup>art-66/par-2 · https://japanlaw.org/ja/personal-information-protection-act/art-66/par-2 · https://japanlaw.org/l/415AC0000000057/art-66/par-2</sup>
  The provisions of the preceding paragraph apply mutatis mutandis to cases in which a person set forth in each following item handles personal information in conducting services as prescribed in each item respectively:
  <sup>Ministry of Justice translation — Japanese Law Translation Database System</sup>

    **一**  行政機関等から個人情報の取扱いの委託を受けた者　当該委託を受けた業務
    <sup>art-66/par-2/item-1 · https://japanlaw.org/ja/personal-information-protection-act/art-66/par-2/item-1 · https://japanlaw.org/l/415AC0000000057/art-66/par-2/item-1</sup>
    a person entrusted by an administrative entity with the handling of personal information:that entrusted service;
    <sup>Ministry of Justice translation — Japanese Law Translation Database System</sup>

    **二**  指定管理者（地方自治法（昭和二十二年法律第六十七号）第二百四十四条の二第三項に規定する指定管理者をいう。）　公の施設（同法第二百四十四条第一項に規定する公の施設をいう。）の管理の業務
    <sup>art-66/par-2/item-2 · https://japanlaw.org/ja/personal-information-protection-act/art-66/par-2/item-2 · https://japanlaw.org/l/415AC0000000057/art-66/par-2/item-2</sup>
    a designated administrator (meaning a designated administrator prescribed in Article 244-2, paragraph (3) of the Local Autonomy Act (Act No. 67 of 1947)):management service of a public facility (meaning a public facility prescribed in Article 244, paragraph (1) of that Act);
    <sup>Ministry of Justice translation — Japanese Law Translation Database System</sup>

    **三**  第五十八条第一項各号に掲げる者　法令に基づき行う業務であって政令で定めるもの
    <sup>art-66/par-2/item-3 · https://japanlaw.org/ja/personal-information-protection-act/art-66/par-2/item-3 · https://japanlaw.org/l/415AC0000000057/art-66/par-2/item-3</sup>
    a person set forth in each item of Article 58, paragraph (1):service which is conducted based on laws and regulations and specified by Cabinet Order;
    <sup>Ministry of Justice translation — Japanese Law Translation Database System</sup>

    **四**  第五十八条第二項各号に掲げる者　同項各号に定める業務のうち法令に基づき行う業務であって政令で定めるもの
    <sup>art-66/par-2/item-4 · https://japanlaw.org/ja/personal-information-protection-act/art-66/par-2/item-4 · https://japanlaw.org/l/415AC0000000057/art-66/par-2/item-4</sup>
    a person set forth in each item of Article 58, paragraph (2):business prescribed in each item of that paragraph which is conducted based on laws and regulations and specified by Cabinet Order;
    <sup>Ministry of Justice translation — Japanese Law Translation Database System</sup>

    **五**  前各号に掲げる者から当該各号に定める業務の委託（二以上の段階にわたる委託を含む。）を受けた者　当該委託を受けた業務
    <sup>art-66/par-2/item-5 · https://japanlaw.org/ja/personal-information-protection-act/art-66/par-2/item-5 · https://japanlaw.org/l/415AC0000000057/art-66/par-2/item-5</sup>
    a person entrusted by a person set forth in each preceding item with service prescribed in each item (including entrustment via two or more layers):that entrusted service.
    <sup>Ministry of Justice translation — Japanese Law Translation Database System</sup>

---

## Cites
- art-66/par-2: 前項 → 個人情報の保護に関する法律 第六十六条第一項 (Article 66, paragraph (1)), art-66/par-1 — https://japanlaw.org/ja/personal-information-protection-act/art-66/par-1 · https://japanlaw.org/l/415AC0000000057/art-66/par-1
- art-66/par-2/item-2: 地方自治法（昭和二十二年法律第六十七号）第二百四十四条の二第三項 → e-Gov law 322AC0000000067, 第二百四十四条の二第三項 (Article 244-2, paragraph (3)), art-244-2/par-3 — not held in this collection
- art-66/par-2/item-2: 同法第二百四十四条第一項 → e-Gov law 322AC0000000067, 第二百四十四条第一項 (Article 244, paragraph (1)), art-244/par-1 — not held in this collection
- art-66/par-2/item-3: 第五十八条第一項 → 個人情報の保護に関する法律 第五十八条第一項 (Article 58, paragraph (1)), art-58/par-1 — https://japanlaw.org/ja/personal-information-protection-act/art-58/par-1 · https://japanlaw.org/l/415AC0000000057/art-58/par-1
- art-66/par-2/item-4: 第五十八条第二項 → 個人情報の保護に関する法律 第五十八条第二項 (Article 58, paragraph (2)), art-58/par-2 — https://japanlaw.org/ja/personal-information-protection-act/art-58/par-2 · https://japanlaw.org/l/415AC0000000057/art-58/par-2
- art-66/par-2/item-5: 前各号 → 個人情報の保護に関する法律 第六十六条第二項第一号 (Article 66, paragraph (2), item (i)), art-66/par-2/item-1 — https://japanlaw.org/ja/personal-information-protection-act/art-66/par-2/item-1 · https://japanlaw.org/l/415AC0000000057/art-66/par-2/item-1
- art-66/par-2/item-5: 前各号 → 個人情報の保護に関する法律 第六十六条第二項第二号 (Article 66, paragraph (2), item (ii)), art-66/par-2/item-2 — https://japanlaw.org/ja/personal-information-protection-act/art-66/par-2/item-2 · https://japanlaw.org/l/415AC0000000057/art-66/par-2/item-2
- art-66/par-2/item-5: 前各号 → 個人情報の保護に関する法律 第六十六条第二項第三号 (Article 66, paragraph (2), item (iii)), art-66/par-2/item-3 — https://japanlaw.org/ja/personal-information-protection-act/art-66/par-2/item-3 · https://japanlaw.org/l/415AC0000000057/art-66/par-2/item-3
- art-66/par-2/item-5: 前各号 → 個人情報の保護に関する法律 第六十六条第二項第四号 (Article 66, paragraph (2), item (iv)), art-66/par-2/item-4 — https://japanlaw.org/ja/personal-information-protection-act/art-66/par-2/item-4 · https://japanlaw.org/l/415AC0000000057/art-66/par-2/item-4

## Cited by

7 provisions cite this one. No official source publishes this direction.

- 個人情報の保護に関する法律 第六十一条第一項（個人情報の保有の制限等） — https://japanlaw.org/ja/personal-information-protection-act/art-61/par-1 · https://japanlaw.org/l/415AC0000000057/art-61/par-1
- 個人情報の保護に関する法律 第六十六条第二項（安全管理措置） — https://japanlaw.org/ja/personal-information-protection-act/art-66/par-2 · https://japanlaw.org/l/415AC0000000057/art-66/par-2
- 個人情報の保護に関する法律 第六十六条第二項第五号（安全管理措置） — https://japanlaw.org/ja/personal-information-protection-act/art-66/par-2/item-5 · https://japanlaw.org/l/415AC0000000057/art-66/par-2/item-5
- 個人情報の保護に関する法律 第六十七条第一項（従事者の義務） — https://japanlaw.org/ja/personal-information-protection-act/art-67/par-1 · https://japanlaw.org/l/415AC0000000057/art-67/par-1
- 個人情報の保護に関する法律 第百二十五条第一項（適用の特例） — https://japanlaw.org/ja/personal-information-protection-act/art-125/par-1 · https://japanlaw.org/l/415AC0000000057/art-125/par-1
- 個人情報の保護に関する法律 第百七十六条第一項 — https://japanlaw.org/ja/personal-information-protection-act/art-176/par-1 · https://japanlaw.org/l/415AC0000000057/art-176/par-1
- 行政手続における特定の個人を識別するための番号の利用等に関する法律 第三十一条第三項（情報提供等の記録についての特例） — https://japanlaw.org/ja/my-number-act/art-31/par-3 · https://japanlaw.org/l/425AC0000000027/art-31/par-3

---

## Sources

- e-Gov 法令検索, Digital Agency (デジタル庁) — 個人情報の保護に関する法律 — the text in force from 2026-10-01 (https://laws.e-gov.go.jp/law/415AC0000000057/20261001_507AC0000000070), retrieved 2026-10-10
- Japanese Law Translation Database System, Ministry of Justice (法務省) — Act on the Protection of Personal Information — Ministry of Justice translation (https://www.japaneselawtranslation.go.jp/en/laws/view/4241/tb), retrieved 2026-10-10
- This site's parser, version 190 — 個人情報の保護に関する法律 — structure, counts, cross-references and defined terms, computed 2026-10-10
