Cabinet decision on the revision of the Personal Information Protection Act Use of electronic information by companies Strictly March 10 at 9:45
With concerns about the handling of personal information by large IT companies, the Cabinet has decided to amend the Personal Information Protection Law, which could require the government to stop using the information.
The revision of the Personal Information Protection Law, which was approved by the Cabinet on October 10, revised that the requirement for companies to suspend or delete personal information is currently limited to illegal information acquisition. It is being relaxed so that it can be applied to cases where personal rights and interests such as advertisements and solicitation may be impaired.
Also, when a company provides data such as Internet browsing records to another company, it is obliged to obtain the user's consent if it is clear that the providing company uses the information in a form that identifies the individual. You.
In addition, if the disclosure of personal information of a company exceeds a certain number, it will be required to report it to the government's Personal Information Protection Committee and notify the person himself.
In addition, penalties for violations of the Personal Information Protection Commission's orders will be strengthened, and the maximum fine for corporations will be increased to 100 million yen.
The government is aiming to pass the amendment in the Diet now.
Stricter conditions for using cookies
Regarding personal data, information such as words searched by a huge IT company on the Internet and purchase history of mail-order sales is processed into statistical data so that individuals can not be identified and sold to the outside, and used as big data. Business is expanding rapidly.
In particular, electronic information called "cookies" that record IDs and browsing histories on the Internet are increasingly used in advertisements that are automatically displayed on websites.
On the other hand, in the problem that the operating company of the employment information site "Riku Navi" predicts the rejection rate of the student's undecided job and sells it to the company, the information of "cookie" remaining when the student looks at the company site is sufficient for the student. It became clear that they were gathering without explanation.
Also, with the progress of IT technology, it is now possible to easily identify individuals using electronic information such as "cookies", and there has been concern that companies will use them without obtaining their consent. Was.
Based on these facts, this revision has tightened the conditions for companies to use electronic information such as "cookies".
Specifically, when a company provides such electronic information to another company, etc., if it is assumed that the individual can be identified by collating with the database owned by the provider, clarify that it will be treated as personal information, It is required to obtain the consent of the person.