問4
頻出度★★★
個人情報に該当しないものはどれか。
平成25年度 秋期 ITパスポート試験 問4
ストラテジ系法務 › セキュリティ関連法規
This question's explanation and your answers so far.
解説
問 4
Incorrectア
A name, address, and phone number listed in a phone book ordered by the Japanese syllabary can identify a specific individual through the name, so they are personal information. Thinking “it is public information, therefore it is not personal information” is wrong: whether information is public or not has nothing to do with the definition. Even a commercially sold phone book or information published on the internet is treated as personal information as long as a specific individual can be identified.
Incorrectイ
An address book containing the names and addresses of the company's own employees can identify individuals by name, and addresses are also information about individuals, so it is clearly personal information. It is not excluded for reasons such as “it is internal company data” or “they are employees, not customers”. Employee information is also protected by the Personal Information Protection Act, and the business operator bears obligations such as taking security control measures and not using the data beyond its stated purpose.
- ウ
正解 The correct answer is “ウ”. Personal information means “information about a living individual that can identify a specific individual through descriptions such as a name”, and it also includes information that “can be easily cross-referenced with other information and thereby identify a specific individual”, even if it cannot identify anyone by itself. Choice ウ is a list made up only of employee codes, and the question text explicitly states that it cannot be easily cross-referenced with other information. In other words, looking at the list tells you nothing about who the people are, and it cannot easily be matched against other data such as an employee roster. Because it has neither identifiability nor ease of cross-reference, it is not personal information. That is why it is the answer to this question, which asks for the item that does NOT qualify.
Incorrectエ
Security camera footage is also personal information as long as an individual can be identified in it (for example, the face is recognizable). Personal information is not limited to text data: images, video, and audio are covered as well, if a specific individual can be identified from them. The question text itself says it is footage in which an individual can be identified, which explicitly shows that the identifiability requirement is met.
ここがポイント
- Definition of personal information: information about a living individual that can identify a specific individual through descriptions such as a name or date of birth. It also includes information that can be easily cross-referenced with other information and thereby identify an individual (ease of cross-reference).
- How to judge: the only criterion is whether an individual can be identified. Whether the data is public or private, internal or external, text or video, and how it was obtained are all irrelevant; only data such as employee codes, which identify no one on their own and cannot be easily cross-referenced, falls outside personal information.
用語