問25
頻出度★★★
個人情報保護法で定める個人情報取扱事業者の義務が適用されないものはどれか。
平成28年度 春期 ITパスポート試験 問25
ストラテジ系法務 › セキュリティ関連法規
This question's explanation and your answers so far.
解説
問 25
Incorrectア
The personal information a gas company handles in its meter-reading work is customer information handled as part of ordinary business activities; it does not fall under the exemptions for news reporting, academic study, religion, or politics. Therefore the obligations of a personal information handling business operator apply.
Incorrectイ
The customer personal information a securities company handles in stock trading is likewise personal information used as part of its business, and does not fall under the exemptions. On the contrary, it is a typical case requiring strict management, so the obligations apply.
- ウ
正解 The Act on the Protection of Personal Information contains “exemption” provisions that protect freedom of expression, freedom of religion, freedom of academic inquiry, and the like. When a news organization handles personal information for the purpose of news reporting, it is exempt from the obligations of a personal information handling business operator (specifying the purpose of use, restricting provision to third parties, responding to disclosure requests, and so on). Therefore ウ, “management of personal information handled by a newspaper company in its news reporting,” is the one to which the obligations do not apply.
Incorrectエ
The purchaser's personal information a railway company handles in commuter pass sales likewise accompanies ordinary commercial transactions and does not fall under the exemptions. Therefore the obligations of a personal information handling business operator apply.
ここがポイント
- Exemptions under the Act on the Protection of Personal Information (as of when the question was set; the amendment effective April 2022 removed academic research institutions from the blanket exemption, leaving exceptions only for some obligations): when news organizations (for reporting purposes), authors, academic research institutions, religious organizations, and political organizations handle personal information for their inherent activity purposes, they are exempt from the obligations of a personal information handling business operator.
- The exemptions are exceptions established to protect freedom of expression, freedom of academic inquiry, freedom of religion, and the like; they do not apply when an ordinary company handles customer information in its usual business activities.
用語