Specific personal information protection evaluation

Under the My Number System (Social Security/Tax Number System), local governments that intend to or possess specific personal information files are required to conduct a specific personal information protection assessment.

Note: Specific personal information files refer to personal information files, personal information databases, etc. that include My Number.

It is one of the institutional protection measures based on concerns regarding the My Number system (centralized management of personal information by the state, unauthorized tracking and matching of specific personal information, etc.), and prevents infringement of rights and interests such as individual privacy. , which aims to ensure public trust.

A "specific personal information protection evaluation report" is created for each office that holds specific personal information files, and after analyzing the risk of specific personal information leakage or other situations, appropriate measures are taken to reduce such risks. We declare that we will take appropriate measures.
In principle, the evaluation report to be created will be classified as follows, depending on the number of people covered by the specific personal information file.
(1) If the number of subjects is less than 1,000 people, it is not mandatory to carry out a specific personal information protection assessment.
(2) If the target number is 1,000 or more and less than 100,000 people, create a basic item evaluation form. (3) If the target number is 100,000 or more and less than 300,000 people, create a basic item evaluation form + priority item evaluation form.

Note: For more details, please see the link below (Personal Information Protection Commission website).

The created evaluation documents will be published one after another on the My Number Protection Evaluation Web below.
In addition, we will review the evaluation report at least once a year, publish the evaluation report that reflects the changes, and declare safety.