Healthcare / Medical Marketing Strategy in Japan | Advanced Healthcare Solutions Japan Co. ltd

FAQ

Main »» Service

Table of Contents
The Personal Information Protection Act

The Personal Information Protection Act

The Personal Information Protection Act applies to government or private entities that collect, handle or use personal information. The Act, however, does not apply to persons and companies who handle the personal information of less than 5,000 individuals. Those parts of the Act affecting the private sector will come into force on April 1, 2005. 

Requirements 
According to the Act, an entity handling personal information must:
• Specify its purpose for collecting and using personal information 
• Not acquire information by fraudulent or other unfair means 
• Promptly notify the data subject of the purpose for which their personal information will be used, or otherwise announce the purpose for use 
• Ensure that personal data are kept secure from loss and unauthorized access and disclosure 
• Refrain from supplying personal data to third parties without the prior consent of the individual concerned, except in certain defined circumstances (presumably the restrictions on providing information to third parties covers transfers both inside and outside the country) 
• Respond to data subject requests for correction, supplementation or deletion of personal data 
• Respond to data subject requests that an entity cease using personal data altogether 
• Endeavor to appropriately and promptly handle individual complaints about the handling of personal information. Businesses must also endeavor to set up an internal complaint-handling system.

[ Back to Index ]