個人情報保護法では, あらかじめ本人の同意を得ていなくても個人データの提供が許される行為を規定している。この行為に該当するものだけを, 全て挙げたものはどれか。 a 事故で意識不明の人がもっていた本人の社員証を見て, 搬送先の病院が本人の会社に電話してきたので, 総務の担当者が本人の自宅電話番号を教えた。 b 新規加入者を勧誘したいと保険会社の従業員に頼まれたので, 総務の担当者が新入社員の名前と所属部門のリストを渡した。 c 不正送金等の金融犯罪被害者に関する個人情報を, 類似犯罪の防止対策を進める捜査機関からの法令に基づく要請に応じて, 総務の担当者が提供した。
令和6年度 ITパスポート試験 問27
This question's explanation and your answers so far.
問 27
Incorrectア
This lists only a. It is correct that a falls under an exception, but c also falls under the “cases based on law” exception, so ア, which omits c, has a missing item and is incorrect.
- イ
正解 The correct answer is イ (a, c). Under the Act on the Protection of Personal Information, providing personal data to a third party in principle requires the person’s consent, but the law also defines several exceptions where provision is allowed even without consent. Case a is necessary to protect the life and body of the person who lost consciousness in an accident, and obtaining the person’s consent is difficult, so it falls under an exception. Case c is provision made in response to a “request based on law” from an investigative agency, which falls under the “cases based on law” exception. Therefore the ones allowed without consent are both a and c, and only イ, which lists just these two, is correct.
Incorrectウ
This lists b and c. Case c is correct, but b is provision for the commercial purpose of soliciting new policyholders for an insurance company; it falls under none of the exceptions and requires the person’s consent. Including b, which is not allowed without consent, makes it incorrect.
Incorrectエ
This lists only c. It is correct that c falls under an exception, but a also falls under the exception of being necessary to protect life and body where obtaining consent is difficult, so エ, which omits a, has a missing item and is incorrect.
- Third-party provision of personal information in principle requires the person’s consent, but as exceptions provision is allowed without consent in each of these cases: when based on law; when necessary to protect a person’s life, body, or property and obtaining the person’s consent is difficult; for improving public health or fostering the sound development of children; and for cooperating with the national or local government.
- Provision for the operator’s own convenience, such as for profit or solicitation, does not fall under the exceptions and always requires the person’s consent; judge such cases by distinguishing them from provision to protect life and body or provision based on law.