問21
頻出度★★★
個人情報保護法における“個人情報”だけを全て挙げたものはどれか。 a 記号や数字だけからなるハンドルネームを集めたファイル b 購入した職員録に載っている取引先企業の役職と社員名 c 電話帳に載っている氏名と住所，電話番号 d 取引先企業担当者の名刺データベース
平成26年度 秋期 ITパスポート試験 問21
ストラテジ系法務 › セキュリティ関連法規
This question's explanation and your answers so far.
解説
問 21
Incorrectア
This option is wrong because it includes a. A handle name (nickname) made up of only symbols and numbers cannot by itself tell you who the person is, nor can it be easily cross-checked with other information to identify an individual, so it is not personal information. In addition, this option leaves out c (names, addresses, and phone numbers in a telephone directory) and d (a business card database), which are personal information, so it does not list them all either.
Incorrectイ
This option includes a, which is not personal information, and at the same time leaves out b, which is. If b was excluded on the grounds that “it is information from a purchased employee directory,” that is a misunderstanding: even when the information was obtained by purchase, as long as it contains employee names, a specific individual can be identified, and it must be handled as personal information.
Incorrectウ
b and c are indeed personal information, but this option omits d, the business card database, which is also personal information, so it does not satisfy the condition of listing all and only the personal information. Even when business cards are received in the course of business, the names and contact details identify specific individuals, so they are personal information; once compiled into a database, it becomes a personal information database and is subject to management obligations.
- エ
正解 The correct answer is “エ b, c, d”. Under the Act on the Protection of Personal Information, “personal information” means information about a living individual that can identify a specific individual by name, date of birth, or other descriptions (including information that can be easily cross-checked with other information and thereby identify the individual). In b, the job titles and employee names of business-partner companies listed in a purchased employee directory contain employee names, so a specific individual can be identified; this is personal information. In c, the names, addresses, and phone numbers in a telephone directory likewise identify specific individuals, so they are personal information as well. In d, a business card database bundles together names, employers, job titles, and contact details, making it a typical example of personal information. The key point here is that whether the information has already been made public, or whether it was obtained by purchase, does not affect whether it counts as personal information. Regardless of how it was obtained or whether it is publicly known, if a specific individual can be identified, it is protected as personal information. Therefore the items that are personal information are the three b, c, and d, so エ is appropriate.
ここがポイント
- Personal information is information about a living individual that can identify a specific individual by name or the like (including information that can be easily cross-checked with other information to identify the individual). Whether a name is included is the first clue when judging.
- Even information that has already been made public (telephone directories, employee directories), or information obtained legitimately by purchase or by exchanging business cards, counts as personal information as long as a specific individual can be identified. Conversely, a collection consisting only of handle names that cannot identify individuals is not personal information.
用語