(i)insurer number provided for in Article 3, paragraph (11) of the Health Insurance Act (Act No. 70 of 1922) and insured person symbol and number provided for in paragraph (12) of that Article;

(ii)insurer number provided for in Article 2, paragraph (10) of the Mariners Insurance Act (Act No. 73 of 1939) and insured person symbol and number provided for in paragraph (11) of that Article;

(iii)number of a passport (excluding those issued by the Japanese government) provided for in Article 2, item (v) of the Immigration Control and Refugee Recognition Act (Cabinet Order No. 319 of 1951);

(iv)number of a residence card referred to in Article 19-4, paragraph (1), item (v) of the Immigration Control and Refugee Recognition Act;

(v)subscriber etc. symbol and number etc. provided for in Article 45, paragraph (1) of the Private School Personnel Mutual Aid Association Act (Act No. 245 of 1953);

(vi)member etc. symbol and number etc. provided for in Article 112-2, paragraph (1) of the National Public Servants Mutual Aid Association Act (Act No. 128 of 1958);

(vii)member etc. symbol and number etc. provided for in Article 144-24-2, paragraph (1) of the Local Public Care Service Mutual Aid Association Act (Act No. 152 of 1962);

(viii)insured person number on an employment insurance-insured person's certificate referred to in Article 10, paragraph (1) of the Ordinance for Enforcement of the Employment Insurance Act (Ordinance of Ministry of Labor No. 3 of 1975);

(ix)number of a special permanent resident certificate referred to in Article 8, paragraph (1), item (iii) of the Special Act on the Immigration Control of, inter alia, those who have lost Japanese Nationality pursuant to the Treaty of Peace with Japan (Act No. 71 of 1991).

(i)physical disabilities stated in the appended table of the Act for Welfare of Persons with Physical Disabilities (Act No. 283 of 1949);

(ii)intellectual disabilities referred to under the Act for the Welfare of Persons with Intellectual Disabilities (Act No. 37 of 1960);

(iii)mental disorders or disabilities referred to under the Act on Mental Health and Welfare for Persons with Mental Disorders or Disabilities (Act No. 123 of 1950) (including developmental disabilities prescribed in Article 2, paragraph (1) of the Act on Support for Persons with Developmental Disabilities (Act No. 167 of 2004), and excluding those stated in the preceding item);

(iv)disorders or disabilities of a degree of severity specified by the Minister of Health, Labour and Welfare which have arisen due to disease for which no established treatment exists or due to other rare disease as specified by Cabinet Order under Article 4, paragraph (1) of the Act on Providing Comprehensive Support for Daily Life and Life in Society of Persons with Disabilities (Act No. 123 of 2005).

(i)a foreign government, a foreign governmental organization, a local government in a foreign country, or an international organization;

(ii)a person who is equivalent to an academic research institution, etc. or the equivalent provided for in Article 16, paragraph (8) of the Act in a foreign country;

(iii)a person who is equivalent to a person stated in each item of Article 57, paragraph (1) of the Act in a foreign country.

(i)situations in which leakage, loss or damage (referred to below as "leakage, etc." in this Article and paragraph (1) of the following Article) of personal data that contains sensitive personal information (excluding that for which advanced encryption or other necessary measures have been taken for protecting individual rights and interests; the same applies in this Article and paragraph (1) of the following Article) occurred or possibly occurred;

(ii)situations in which leakage, etc. of personal data that could cause property damage when the data is wrongfully used occurred or possibly occurred;

(iii)situations in which leakage, etc. of personal data (including personal information that a business handling personal information has acquired or intends to acquire and that is going to be handled as personal data) arising from an act conducted possibly for wrongful purposes, against the business handling personal information occurred or possibly occurred;

(iv)situations in which leakage, etc. of personal data and the number of persons identifiable by the personal data exceeds 1,000 occurred or possibly occurred.

(i)overview;

(ii)the details of personal data (with regard to the situation specified in item (iii) of the preceding Article, including the personal information prescribed in that item; the same applies in the following item) that occurred or possibly occurred to have been leaked, etc.;

(iii)number of persons identifiable by personal data that occurred or possibly occurred to have been leaked, etc.;

(iv)causes;

(v)whether there is or possibly be secondary damage and details of the secondary damage;

(vi)implementation status of measures to the identifiable persons;

(vii)implementation status of public announcement;

(viii)measures to prevent recurrence;

(ix)other matters that are to serve as reference.

(i)when reporting to the Personal Information Protection Commission; a method using an electronic data processing system (meaning an electronic data processing system connecting a computer used by the Personal Information Protection Commission and a computer used by the reporting person via telecommunications lines) (or a method submitting a written report in accordance with Appended Form No.1 if it is found to be difficult to use an electronic data processing system due to a fault in telecommunications lines, a disaster or other reasons);

(ii)when reporting to the competent minister for the business who was delegated authority under Article 26, paragraph (1) of the Act, pursuant to Article 150, paragraph (1) of the Act: a method submitting a written report in accordance with Appended Form No.1 (in the event that another method is prescribed by the competent minister for the business, that method).

(i)setting a necessary period for a person identifiable by the personal data provided to a third party (referred to as "the identifiable person" in the following item) to request the provision of the data to be discontinued;

(ii)adopting an appropriate and reasonable method to enable the identifiable person to recognize matters stated without fail in each item of Article 27, paragraph (2) of the Act.

(i)a method using an electronic data processing system (meaning an electronic data processing system connecting a computer used by the Personal Information Protection Commission and a computer used by a notifying person via a telecommunications line);

(ii)a method submitting a written notification in accordance with Appended Form No. 2 (or Appended Form No. 3 if notifying the provision of personal data was discontinued under Article 27, paragraph (3) of the Act) and an optical disc (including an object that can reliably keep a record of certain matters by a method equivalent to an optical disc; referred to below as an "optical disc, etc.") that has kept a record of matters to be stated in the written notification.

(i)a method of updating personal data provided to a third party;

(ii)a planned date for starting the provision of personal data to a third party related to the relevant notification to the Personal Information Protection Commission.

(i)when giving a notification under Article 27, paragraph (2) of the Act: the matters stated in each item of that paragraph;

(ii)when giving a notification of change under Article 27, paragraph (3) of the Act: matters after the change that are stated in each item of paragraph (2) of that Article;

(iii)when giving a notification under Article 27, paragraph (3) of the Act regarding discontinuation of the provision of personal data: a statement to that effect.

(i)has established a law, regulation or other rules equivalent to the provisions regarding business handling personal information under the Act, and conditions in the country are found that there are reasonable grounds to believe that the provisions have been enforced in the foreign country;

(ii)has established an independent foreign enforcement authority equivalent to the Personal Information Protection Commission, and has established a system for the foreign enforcement authority to provide necessary and appropriate supervision;

(iii)is recognized to be able to collaborate and cooperate with Japan based on mutual understanding regarding the proper and effective use of personal information and the protection of individual rights and interests;

(iv)is recognized to be able to send and receive personal data mutually and smoothly to and from Japan while ensuring the protection of personal data without restricting the international transfer of personal data beyond the extent necessary for protecting personal data;

(v)in addition to those matters provided for in the preceding four items, it is recognized that specifying the country as a foreign country under Article 28, paragraph (1) of the Act will contribute to the creation of new industries and the realization of a vibrant economic society and an enriching quality of life of the Japanese public.

(i)a business handling personal information and a person who receives personal data have ensured, in relation to the handling of the personal data by the person, the implementation of measures in line with the purport of the provisions under Chapter IV, Section 2 of the Act by an appropriate and reasonable method;

(ii)a person who receives personal data has obtained certification based on an international framework concerning the handling of personal information.

(i)name of the relevant foreign country;

(ii)information on a personal information protection system in the relevant foreign country obtained in an appropriate and reasonable manner;

(iii)information on measures taken by the relevant third party to protect personal information.

(i)the fact that the matter provided for in item (i) of the preceding paragraph cannot be identified and the reason;

(ii)if there is information that is to serve as a reference for an identifiable person in place of the matter provided for in item (i) of the preceding paragraph, that information.

(i)to periodically check the implementation status of the equivalent measures by the third party and the presence and content of the foreign country's systems that may affect implementation of the equivalent measures, in an appropriate and reasonable manner;

(ii)to take necessary and appropriate measure when the third party fails to implement the equivalent measures; and to discontinue the provision of personal data (or information related to an individual if applied mutatis mutandis pursuant to Article 31, paragraph (2) of the Act following the deemed replacement of terms) to the third party when it becomes difficult to ensure continuous implementation of the equivalent measures.

(i)methods for establishing the system by the relevant third party provided for in Article 28, paragraph (1) of the Act;

(ii)overview of the equivalent measures implemented by the relevant third party;

(iii)frequency and methods for confirmation under paragraph (1), item (i);

(iv)the name of the relevant foreign country;

(v)presence and content of the relevant foreign country's systems that may affect implementation of the equivalent measures by the relevant third party;

(vi)presence and overview of interference with the implementation of the equivalent measures by the relevant third party;

(vii)overview of the measures taken by the business handling personal information pursuant to paragraph (1), item (ii) with respect to the interference referred to in the preceding item.

(i)cases in which personal data has been provided to a third party pursuant to Article 27, paragraph (2) of the Act: the matters stated in the following (a) through (d):

(ii)cases in which personal data has been provided to a third party pursuant to Article 27, paragraph (1) of the Act or Article 28, paragraph (1) of the Act: the matters stated in the following (a) and (b):

(i)cases in which a record was prepared by using a method prescribed in Article 19, paragraph (3): a period up to the day on which one year has passed from the last date on which personal data relating to the record is provided;

(ii)cases in which a record was prepared by using a method prescribed in the proviso of Article 19, paragraph (2): a period up to the day on which three years have passed from the last date on which personal data relating to the record was provided;

(iii)cases other than the preceding two items: three years.

(i)cases in which a business handling personal information has received personal data from another business handling personal information under Article 27, paragraph (2) of the Act; the matters stated in the following (a) through (e):

(ii)in cases of having received personal data from a business handling personal information under Article 27, paragraph (1) of the Act or Article 28, paragraph (1) of the Act; the matters stated in the following (a) and (b):

(iii)in cases in which information related to an individual is provided by a business handling information related to an individual under Article 31, paragraph (1) of the Act, and acquired as personal data; the matters stated in the following (a) through (d):

(iv)cases in which personal data has been received from a third party (excluding a person falling under a business handling personal information): the matters stated in (b) through (d) of item (i)

(i)cases in which a record was prepared by using a method prescribed in Article 23, paragraph (3): a period up to the day on which one year has passed from the last date on which a business handling personal information receives the personal data relating to the record;

(ii)cases in which a record was prepared by using a method prescribed in the proviso of Article 23, paragraph (2): a period up to the day on which three years have passed from the last date on which a business handling personal information receives the personal data relating to the record;

(iii)cases other than the preceding two items: three years.

(i)the fact to the effect that a business handling information related to an individual has confirmed that an identifiable person's consent referred to in Article 31, paragraph (1), item (i) of the Act has been obtained; and for a third party in a foreign country, the fact to the effect that a business handling information related to an individual has confirmed that information has been provided under item (ii) of that paragraph;

(ii)the date when a business handling information related to an individual provided the information related to an individual (if preparing a record referred to in Article 30, paragraph (3) of the Act in an integrated manner as applied mutatis mutandis pursuant to Article 31, paragraph (3) of the Act, following the deemed replacement of terms pursuant to the proviso of paragraph (2) of the preceding Article, the first and last day of the period of provision);

(iii)the name and address of the third party and, if the third party is a corporation, the name of its representative;

(iv)the details of the information related to an individual.

(i)cases in which a business handling information related to an individual prepared a record by using a method prescribed in Article 27, paragraph (3): a period up to the day on which one year has passed from the last date on which the business handling information related to an individual provides the information related to an individual relating to the record;

(ii)cases in which a business handling information related to an individual prepared a record by using a method prescribed in the proviso of Article 27, paragraph (2): a period up to the day on which three years have passed from the last date on which the business handling information related to an individual provides information related to an individual relating to the record;

(iii)cases other than the preceding two items: three years.

(i)deleting all or part of the identifier or their equivalent which can identify a specific individual contained in personal information (including replacing all or the part of the identifier or the equivalent with another identifier or the equivalent by a method without regularity that enables their restoration);

(ii)deleting all individual identification codes contained in personal information (including replacing the individual identification codes with another identifier or the equivalent by a method without regularity that enables their restoration of the individual identification codes);

(iii)deleting the identifier or the equivalent contained in personal information that could cause property damage by being wrongfully used (including replacing the identifier or the equivalent with another identifier or the equivalent by a method without regularity that enables their restoration).

(i)clearly defining the authority and responsibility of a person handling deleted or other related information provided for in Article 41, paragraph (2) of the Act (for information relating to a processing method pursuant to paragraph (1) of that Article, limited to methods which can restore personal information used to prepare pseudonymized personal information by using the information; the same applies below in this Article);

(ii)establishing rules and procedures on the handling of deleted or other related information, appropriately handling deleted or other related information in accordance with the rules and procedures, evaluating the handling situation, and taking necessary measures to seek improvement based on the evaluation results;

(iii)taking necessary and appropriate measures to prevent a person with no legitimate authority to handle deleted or other related information from handling the deleted or other related information.

(i)a means of transmitting electronic or magnetic records to a mobile communication terminal used by the counterparty by using a telephone number for transmission and receipt (including cases where other persons are entrusted to do so);

(ii)a means of sending an email (including cases where other persons are entrusted to do so);

(iii)in addition to the means provided for in the preceding item, a means sending telecommunications (meaning telecommunications as provided for in Article 2, item (i) of the Telecommunications Business Act (Act No. 86 of 1984)) used to transmit information by identifying a person who receives the transmission (including cases where other persons are entrusted to do so).

(i)deleting all or part of an identifier or the equivalent which can identify a specific individual contained in personal information (including replacing all or the part of the identifier or the equivalent with other identifiers or their equivalent by a method without regularity that enables their restoration);

(ii)deleting all individual identification codes contained in personal information (including replacing the individual identification codes with another identifier or the equivalent by a method without regularity that enables restoration of the individual identification codes);

(iii)deleting the codes (limited to those mutually linking information being actually handled by a business operator handling personal information ) which link personal information and information obtained by having taken measures against the personal information (including replacing the codes with other codes which cannot link the personal information and information obtained by having taken measures concerning the personal information by a method without regularity that enables their restoration);

(iv)deleting an idiosyncratic identifier or the equivalent (including replacing the idiosyncratic identifier or the equivalent with another identifier or the equivalent by a method without regularity that enables its restoration);

(v)besides the measures stated in the preceding items, taking appropriate measures based on the results from considering the attribute of a personal information database, etc. such as the difference between the identifier or the equivalent contained in personal information and the identifier or the equivalent contained in other personal information constituting the same personal information database, etc.

(i)clearly defining the authority and responsibility of a person handling processing method etc. related information (meaning information relating to the identifier or the equivalent. and individual identification codes which were deleted from personal information used to prepare anonymized personal information and information relating to a processing method carried out pursuant to Article 43, paragraph (1) of the Act (limited to information which can restore the personal information through the use of that information); the same applies below in this Article);

(ii)establishing rules and procedures on the handling of processing method etc. related information, appropriately handling processing method etc. related information in accordance with the rules and procedures, evaluating the handling situation, and taking necessary measures to seek improvement based on the evaluation results;

(iii)taking necessary and appropriate measures to prevent a person with no legitimate authority to handle processing method etc. related information from handling the processing method etc. related information.

(i)situations in which there was the occurrence of or the risk of occurrence of leakage, loss or damage (referred to below as "leakage, etc." in this Article and paragraph (1) of the following Article) of personal information the administrative body holds that contains sensitive personal information (excluding information for which advanced encryption or other necessary measures have been taken for protecting individual rights and interests; the same applies in this Article and paragraph (1) of the following Article);

(ii)situations in which there was the occurrence of or the risk of occurrence of leakage, etc. of personal information the administrative body holds that could possibly cause property damage when the information is wrongfully used;

(iii)situations in which there was the occurrence of or the risk of occurrence of leakage, etc. of personal information the administrative body holds (including personal information that an administrative body to which the head of an administrative body, etc. belongs has acquired or intends to acquire and that is going to be handled as personal information the administrative body holds) arising from an act conducted possibly for wrongful purposes, against the administrative body to which the head of an administrative, etc. belongs ;

(iv)situations in which leakage, etc. of personal information the administrative body holds where the number of persons identifiable by the personal information exceeds 100 occurred or possibly occurred;

(v)situations in which leakage, etc. of personal information the administrative body holds that contains sensitive personal information prescribed by local ordinance occurred or possibly occurred (limited to cases where local government body or local incorporated administrative agency make a report referred to in Article 68, paragraph (1) of the Act and sensitive personal information prescribed by local ordinance is prescribed in local ordinance which is applied to the local government body or the local incorporated administrative agency).

(i)overview;

(ii)the details of personal information the administrative body holds (with regard to the situation specified in item (iii) of the preceding Article, including the personal information prescribed in that item; the same applies in the following item) for which leakage, etc. occurred or possibly occurred;

(iii)the number of persons identifiable by personal information the administrative body holds for which leakage, etc. occurred or possibly occurred;

(iv)causes;

(v)whether there is or possibly be secondary damage, and the details;

(vi)implementation status of measures in relation to identifiable persons;

(vii)implementation status of public announcement;

(viii)measures to prevent recurrence;

(ix)other matters for reference.

(i)has established a law, regulation or other rules equivalent to the provisions regarding business handling personal information under the Act, and its status is such that there are reasonable grounds to believe that they have been enforced in the foreign country;

(ii)has established an independent foreign enforcement authority equivalent to the Personal Information Protection Commission, and has established a system for the foreign enforcement authority to provide necessary and appropriate supervision;

(iii)is recognized to have the ability to collaborate and cooperate with Japan based on mutual understanding regarding the proper and effective application of personal information and the protection of individual rights and interests;

(iv)is recognized to have the ability to transfer the personal information the administrative body holds mutually and smoothly between itself and Japan while ensuring the protection of the personal information the administrative body holds without restricting the international transfer of such personal information beyond the extent necessary for protecting it;

(v)in addition to those matters provided for in the preceding four items, it is recognized that specifying the country as a foreign country under Article 71, paragraph (1) of the Act will contribute to the creation of new industries and the realization of a vibrant economic society and an enriched life of the Japanese public.

(i)Concerning the handling of the personal information that a person has received from the head of an administrative body, etc. that holds the information, the head of the administrative body, etc. has ensured with the person that measures are being implemented in line with the purport of the provisions under Chapter IV, Section 2 of the Act by an appropriate and reasonable method.;

(ii)a person who receives personal information the administrative body holds has obtained certification based on an international framework concerning the handling of personal information.

(i)name of the relevant foreign country;

(ii)information on a personal information protection system in the relevant foreign country obtained in an appropriate and reasonable manner;

(iii)information on measures taken by the relevant third party to protect personal information.

(i)the fact that the matter provided for in item (i) of the preceding paragraph cannot be identified and its reason;

(ii)if there is information that is to serve as a reference to an identifiable person in place of the matter provided for in item (i) of the preceding paragraph, that information.

(i)to periodically check the implementation status of the equivalent measures by the third party and the presence and content of the foreign country's systems that may affect implementation of the equivalent measures in an appropriate and reasonable manner;

(ii)to take necessary and appropriate measures when the third party fails to implement the equivalent measures; and to discontinue the provision of personal information the administrative body holds to the third party when it becomes difficult to ensure the continuous implementation of the equivalent measures.

(i)methods for establishing the system by the relevant third party provided for in Article 71, paragraph (1) of the Act;

(ii)overview of the equivalent measures implemented by the relevant third party;

(iii)frequency and methods for confirmation under paragraph (1), item (i);

(iv)the name of the relevant foreign country;

(v)presence and content of the relevant foreign country's systems that may affect implementation of the equivalent measures by the relevant third party;

(vi)presence and overview of interference with the implementation of the equivalent measures by the relevant third party;

(vii)overview of the measures taken by the head of an administrative body, etc. pursuant to paragraph (1), item (ii) with respect to the interference referred to in the preceding item.

(i)a means of transmitting electronic or magnetic records to a mobile communication terminal used by the counterparty by using a telephone number for transmission and receipt (including cases where other people are entrusted to do so);

(ii)a means of sending an email (including cases where other people are entrusted to do so);

(iii)in addition to the means provided for in the preceding item, a means of sending telecommunications (meaning telecommunications as provided for in Article 2, item (i) of the Telecommunications Business Act) used to transmit information by identifying a person who receives the transmission (including cases where other persons are entrusted to do so).

(i)when a special procedure is prescribed by the provisions of other laws and regulations provided for in the proviso of Article 90, paragraph (1) of the Act or the proviso of Article 98, paragraph (1) of the Act, the provisions of the laws and regulations;

(ii)when attempting to change the matters for which notification has already given pursuant to Article 74, paragraph (1) of the Act, the scheduled date of the change.

(i)a method of payment using postage stamps or similar certificates specified by the Personal Information Protection Commission;

(ii)in cases where a request is made under Article 87, paragraph (3) of the Act by using an electronic data processing system prescribed by Article 6, paragraph (1) of the Act on the Advancement of Government Administration Processes That Utilize Information and Communications Technology pursuant to that paragraph, a method of payment using payment information obtained from the request.

(i)if the person making the proposal is an individual, a copy of the following, which contains the name and address or residence identical to the name and address or residence of the individual: a driver's license, an individual number card as prescribed in Article 2, paragraph (7) of the Act on the Use of Numbers to Identify a Specific Individual in Administrative Procedures (Act No. 27 of 2013), a residence card as prescribed in Article 19-3 of the Immigration Control and Refugee Recognition Act (Cabinet Order No. 319 of 1951), a special permanent resident certificate as prescribed in Article 7, paragraph (1) of the Special Act on the Immigration Control of, inter alia, those who have lost Japanese Nationality pursuant to the Treaty of Peace with Japan (Act No. 71 of 1991), or a document delivered pursuant to the provisions of laws or an order based on the laws sufficiently verifying the identity of the person making a proposal;

(ii)if the person making the proposal is a corporation or other organization, a certificate of registered information or a certificate of seal registration which contains the identical name, address of the head office or principal office, and the identical name of the representative, with the person's name, the address of its head office or principal office, and the name of the person's representative, and which is created within 6 months before the date of proposal, or a document delivered pursuant to the provision of laws or an order based on the law, sufficiently verifying the identity of the person making the proposal;

(iii)if the person making the proposal cannot attach the document stated in the preceding two items for compelling reasons, a document deemed appropriate by the head of an administrative body, etc. to verify that the person making the proposal is the identifiable person;

(iv)in addition to the documents stated in the preceding items, any other documents deemed necessary by the head of an administrative body, etc.

(i)a document regarding an application to conclude a contract for the use of anonymized personal information the administrative body holds under Article 115 of the Act (including cases where applied mutatis mutandis in Article 118, paragraph (2) of the Act) which was prepared in accordance with Appended Form No. 10;

(ii)a document relating to the conclusion of the contract referred to in the preceding item.

(i)amount of fees or usage fees to be paid (referred to below as "fees, etc." in this paragraph);

(ii)method of paying fees, etc.;

(iii)deadline for paying fees, etc.;

(iv)method of providing anonymized personal information the administrative body holds.

(i)a method of making payment by affixing revenue stamps to a document designated by the head of the administrative body;

(ii)for an administrative body or division or institution stated in the items of Article 31, paragraph (3) of the Cabinet Order, a method of payment by using the Appended Form of the Ministerial Order on Special Measures for the Procedures for Paying Fees Based on the Acts on Access to Information Held by Administrative Bodies (Ministry of Finance Order No. 10 of 2001).

(i)deleting all or part of the identifier or the equivalent which can identify a specific individual contained in personal information the administrative body holds (including replacing all or the part of the identifier or the equivalent with another identifier or the equivalent by a method without regularity that enables their restoration);

(ii)deleting all individual identification codes contained in personal information the administrative body holds (including replacing the individual identification codes with other identifier or the equivalent by method without regularity that enables restoration of the individual identification codes);

(iii)deleting the codes (limited to those mutually linking information being actually handled by an administrative body) which link personal information the administrative body holds and information obtained by having taken measures against the personal information the administrative body holds (including replacing the codes with other codes which cannot link the personal information the administrative body holds and information obtained by having taken measures against the personal information the administrative body holds by method without regularity that enables their restoration);

(iv)deleting idiosyncratic identifiers or their equivalent (including replacing the idiosyncratic identifiers or the equivalent with other identifiers or the equivalent without regularity that enables their restoration);

(v)besides the measures stated in the preceding items, taking appropriate measures based on the results from considering the attributes of the personal information files, such as differences between identifiers or the equivalent contained in personal information the administrative body holds and identifiers or the equivalent contained in other personal information the administrative body holds constituting the personal information files that encompass the relevant personal information the administrative body holds.

(i)clearly defining the authority and responsibility of a person handling anonymized personal information and other related information of an administrative body;

(ii)establishing rules and procedures on the handling of anonymized personal information or other related information of an administrative body, appropriately handling anonymized personal information or other related information of an administrative body in accordance with the rules and procedures, evaluating the handling situation, and taking necessary measures to seek improvement based on the evaluation results;

(iii)taking necessary and appropriate measures to prevent a person with no legitimate authority to handle anonymized personal information or other related information of an administrative body from handling the anonymized personal information or other related information of an administrative body.

(i)clearly defining the authority and responsibility of a person handling anonymized personal information (excluding anonymized personal information the administrative body holds; the same applies below in this Article);

(ii)establishing rules and procedures on the handling of anonymized personal information, appropriately handling anonymized personal information in accordance with the rules and procedures, evaluating the handling situation, and taking necessary measures to seek improvement based on the evaluation results;

(iii)taking necessary and appropriate measures to prevent a person with no legitimate authority to handle anonymized personal information from handling the anonymized personal information.

(i)for requests for submission of necessary information or material under Article 146, paragraph (1) of the Act, or for the calling for reports under Article 153 of the Act: documents that state the details and reason for the request or calling;

(ii)recommendations under Article 148, paragraph (1) of the Act; documents that notes the details and reasons for the recommendations;

(iii)an order under Article 148, paragraph (2) or paragraph (3) of the Act, an order under Article 154 of the Act, or rescission under Article 155, paragraph (1) of the Act; documents that state the details of the adverse dispositions, the provisions of laws and regulations that serve as the ground for the dispositions, and the facts comprising the causes of the dispositions.