Skip to content

平成27年度 春期 ITパスポート試験 問2

This question's explanation and your answers so far.

問2
頻出度★★★

個人情報の取得, 活用事例に関する記述a~cのうち, 個人情報保護法で禁止されていない行為だけを全て挙げたものはどれか。 a 自社商品の情報を送ることを明示して, 景品付きアンケートを実施して集めた応募者リストを使い, 新商品のキャンペーンメールを送信した。 b テレビの故障についてメールで問い合わせてきた個人に, 冷蔵庫のキャンペーン案内のファイルを回答のメールに添付して送信した。 c 転職者が以前の職場の社員住所録を使い, 転職の挨拶状も兼ねて新会社のキャンペーンチラシを送付した。

出典 平成27年度 春期 ITパスポート試験 問2
解説

問 2

  • ア

    正解 The Personal Information Protection Act requires that, when personal information is acquired, the purpose of use be specified as clearly as possible and be notified to or publicly announced for the person concerned, and that the information be used only within the scope of that purpose (use beyond the stated purpose is prohibited). In statement a, the company stated in advance that it would send its own product information, and on that basis collected the list of questionnaire applicants, so the purpose of use was shown to the individuals at the time of acquisition. Sending a promotional email for a new product using that list is exactly use within the stated purpose, so it is not an act prohibited by the law. Both b and c involve use outside the purpose stated at acquisition (and c additionally involves improper acquisition), so the option that lists only the actions that are not prohibited is a alone, that is, “ア”.

  • Incorrectイ

    Statement a is lawful, but b is not. The email address obtained in order to answer an inquiry about a television malfunction is personal information acquired for the purpose of handling inquiries, so diverting it to advertising for a refrigerator promotion is use for a different purpose without the person's consent. Therefore the combination a, b does not hold.

  • Incorrectウ

    Both b and c are prohibited acts, so this combination is entirely wrong. Statement b is use beyond the purpose, diverting information obtained for handling inquiries to advertising, and c is improper acquisition, taking the employee address book of a former workplace without permission.

  • Incorrectエ

    Statement c is the most clearly prohibited act. The employee address book of a former workplace is personal information managed by the former employer; taking it out and using it to advertise one's own company without the consent of the individuals or the permission of the former employer amounts to both improper acquisition and use beyond the purpose. The fact that it also serves as a job-change greeting does not justify it.

ここがポイント
  • The basics of the Personal Information Protection Act are specifying and notifying or publicly announcing the purpose of use, and prohibiting use beyond that purpose. Use within the purpose shown to the person at the time of acquisition is lawful; use outside that scope requires the person's consent.
  • Proper acquisition is also a requirement: information obtained improperly, such as a name list or address book taken out without the consent of the individuals, must not be used even for a well-intentioned purpose.
用語

Your answers