Before the revised Personal Information Protection Law, which will come into effect at the end of May 2017, provides anonymously processed information that can be provided to third parties without the consent of the person, the National Institute of Informatics has established technology related to anonymously processed information. We have released a report summarizing the results of the study.
The revised Personal Information Protection Law, which was enacted in September 2015 and will come into effect at the end of May 9, will undergo various changes and expansions to the current law.Of particular note is "anonymously processed information," which can be provided to a third party without the consent of the individual, under certain requirements such as appropriate processing of personal information.It is the world's first framework that balances the protection and utilization of personal information, and new knowledge about standards and processing technology is required.
According to the National Institute of Informatics, the results of the study are the "Technical Study Working Group on Anonymous Processed Information" (chaired by Ichiro Sato, National Institute of Informatics), which consists of 10 experts in informatics, including university faculty members, lawyers, and researchers from private companies. (Professor of Architecture Science Research) summarized it after about 70 hours of discussion.
The report is positioned as a supplement to the guidelines regarding anonymously processed information of the Personal Information Protection Commission, and is used as a reference when companies and organizations create processing standards.
In addition to descriptions that can identify a specific individual such as name, job title in the company, date of birth, purchase history that can be collated with other information, deletion of career, etc., processing method and attention in accordance with the rules of the Personal Information Protection Commission It explains the points in detail.
Authorized personal information protection organizations such as companies and organizations are required to include methods for creating anonymously processed information in their personal information protection guidelines.
