Learn in the textbookSecurity Policy and Management Activities
DefinitionSafety management measures (安全管理措置) are the steps a business takes under Japan's Act on the Protection of Personal Information to prevent leaks, loss and similar harm to personal data.
ExplanationThe guidelines typically sort them into four categories: organizational measures that set up structures and rules, human measures that train and supervise employees, physical measures that protect premises and media, and technical measures that protect data through system mechanisms. When the handling of personal data is outsourced, the outsourcing company must also supervise the contractor to make sure it is following the rules properly.
AnalogyThink of a bank's safe-deposit boxes: the contents are protected from four directions, namely the usage rules, staff training, the vault door and the PIN.
Memory hookRemember the four as who decides, who handles, where it is kept and what protects it: organizational, human, physical, technical.