A社では，個人情報保護法に従って，個人情報を取り扱っている。Bさんが所属する営業部では，個人の顧客がインターネット上のA社のWebページに会員登録することで，商品購入ができるという事業を開始することになった。そこで，Bさんは会員登録をするWebページの仕組みとして，次の事項を考えた。 〔会員登録をするWebページの仕組み〕 ① 個人情報の利用目的を記述したWebページを表示し，顧客が同意ボタンを押すと，個人情報を入力するWebページに移動する。 ② 会員登録の項目としては，氏名，住所，電話番号，生年月日，性別，メールアドレス，ID及びパスワードがあり，これらは必ず入力してもらう。メールアドレスとパスワードについては，誤入力を防ぐために，同じ情報を2度入力してもらう。 ③ Webページでの個人情報の入力が終了し，送信ボタンを押した後，入力情報を確認するWebページを表示し，顧客に入力の間違いがないかを確認してもらう。このとき，入力されたIDが他の会員によって既に登録されている場合，変更を求める。 ④ 顧客が入力情報を確認し，登録ボタンを押した後，登録したメールアドレス宛に，A社の会員として登録された旨を伝える電子メール（以下，メールという）を送信する。 ⑤ ②及び③における顧客のPCとA社のWebサーバとのデータのやり取りは，暗号化による通信を行う。 A社のインターネット上のWebページを使った商品購入では, 会員の個人情報に関する利用目的を「注文や支払に関する連絡, 配達といった商品購入に関する利用」に限定している。このとき, 〔会員登録をするWebページの仕組み〕の②の会員登録に関して, 利用目的から考えて不適切な点があると指摘された。その指摘として, 適切なものはどれか。
平成24年度 秋期 ITパスポート試験 問97
This question's explanation and your answers so far.
問 97
※ Our check while writing this explanation could not fully confirm the published answer; scoring follows IPA's official key.
Incorrectア
Whether the ID is A Company's customer number or something the member enters is a matter of how the system is operated, not a matter of the scope of personal information collected as seen from the purpose of use. Moreover, an individual customer registering as a new member often does not yet have a customer number, so it is more practical to let the member choose an ID that is easy to remember. Duplicates are checked at ③, where a change is requested, so a mechanism for that is already in place. Therefore this does not constitute a valid point about inappropriateness from the standpoint of the purpose of use.
- イ
正解 Under the Personal Information Protection Act, the purpose of using personal information must be specified as clearly as possible, and personal information must not be handled beyond the scope necessary to achieve that purpose. The items collected should likewise be narrowed down, working backward from the purpose of use, to only those that are necessary. The only purpose of use that A Company specified is “use related to purchasing goods, such as contact concerning orders and payments, and delivery.” Meanwhile, item ② of [the mechanism of the member-registration web page] requires the user to enter eight items: name, address, telephone number, date of birth, gender, email address, and ID and password. Sorting these against the purpose of use gives the following. - Address and name ... necessary for delivering the goods. - Telephone number and email address ... necessary for contact concerning orders and payments. - ID and password ... necessary to identify the member, prevent impersonation, and let the member complete the purchase procedure. - Date of birth and gender ... used for neither orders, nor payment contact, nor delivery. Date of birth and gender are information used for other purposes, such as sales analysis by age group or by gender, and they are not needed to achieve the purpose of use that A Company specified. Making them mandatory input items would mean collecting personal information beyond the scope necessary to achieve the purpose of use. Therefore the point raised in イ, that the date of birth and gender should not be made mandatory input items, is appropriate.
Incorrectウ
As stated explicitly in ②, having the user enter the email address and password twice is a confirmation entry intended to prevent input errors. Since it only means typing the same information once more, neither the kinds nor the amount of personal information that A Company collects increases. On the contrary, it is a desirable measure that helps keep the registered content accurate, so it does not amount to a point about collection beyond the purpose of use.
Incorrectエ
The address is an indispensable item for delivering the goods, and the telephone number is also within the scope of the purpose of use, serving as a means of contact concerning orders and payments and at the time of delivery. Even if an email address is enough as a means of contact, packages cannot be delivered by email, so the address cannot be removed from the mandatory items. Therefore making the address and telephone number mandatory is not inappropriate.
- The restriction by purpose of use in the Personal Information Protection Act. A Personal Information Handling Business Operator must specify the purpose of use as clearly as possible and must not handle personal information beyond the scope necessary to achieve it. The items collected must also be worked out backward from the purpose of use, so that information unnecessary for achieving the purpose is not gathered (collection is kept within the necessary scope).
- How to work through it. First grasp the purpose of use that has been specified (here, contact about orders and payments, and delivery), then sort the input items one by one by whether they are really used for that purpose, and check whether items that are not used (date of birth, gender) have been made mandatory. Note also that a confirmation entry asking for the same information twice is a measure for keeping data accurate and does not increase the information collected.