電子メールの送信に関する事例のうち, 個人情報保護の観点から不適切なものはどれか。
平成29年度 秋期 ITパスポート試験 問12
This question's explanation and your answers so far.
問 12
- ア
正解 The correct answer is ア. When you reply to a product-inquiry email by setting the email addresses of multiple customers in the cc (carbon copy) field, customers who do not know one another end up seeing other people's email addresses. An email address is personal information that can identify an individual, and disclosing it to unrelated third parties without the person's consent is inappropriate from the standpoint of personal information protection. When sending to many recipients at once, the correct approach is to use the bcc (blind carbon copy) field, in which each recipient cannot see the other recipients.
Incorrectイ
Because an individual email is composed and sent to each of the top 10 customers one by one, no customer's email address or ranking information is disclosed to any other customer. No leak of personal information occurs, so this is appropriate and not an inappropriate case.
Incorrectウ
The alumni directory that was used had already been distributed to all alumni, and the email addresses it lists are information that everyone already knows about one another. Setting them as recipients does not constitute any new disclosure of personal information, so it cannot be called inappropriate.
Incorrectエ
Because the members' email addresses are set in the bcc (blind carbon copy) field when sending, each recipient does not see the other recipients' email addresses. The personal information is protected and this is correct handling, so it is not an inappropriate case.
- An email address is personal information, and when sending to multiple recipients at once, using the cc (carbon copy) field mutually exposes every recipient's address, which is inappropriate. When sending to people who do not know one another, the principle is to use the bcc (blind carbon copy) field to hide the addresses.
- Also keep in mind the judgment that when the recipients are information already shared among the parties involved (for example, a directory already distributed to everyone), it does not constitute a new disclosure and is unlikely to be a problem.