Guidance to Collection and Use of Personal Information
(1) A personal information manager may collect personal information and use it for the intended purpose of collection in any of the following cases:
1. Where he/she has obtained the consent of a subject of information
2. Where there exist special provisions in any Act or it is inevitable to fulfill an obligation imposed by or under any statute
3. Where it is inevitable for a public institution to perform its affairs provided for in any statute, etc.
4. Where it is inevitably necessary for entering into and performing a contract with a subject of information;
5. Where it is deemed obviously necessary for physical safety and property interests of a subject of information or a third person when the subject of information
or his/her legal representative cannot give prior consent because he/she is unable to express his/her intention or by reason of his/her unidentified address, etc.
6. Where it is necessary for a personal information manager to realize his/her legitimate interests and this obviously takes precedence over the rights of a subject of
information. In such cases, this shall be limited to cases where such information is substantially relevant to a personal information manager's legitimate interests and
reasonable scope is not exceeded.
(2) When a personal information manager obtains consent referred to in paragraph (1) 1, he/she shall notify a subject of information of the following matters.
When the personal information manager changes any of the following matters, he/she shall inform the same and obtain consent thereto:
1. Purposes for which personal information is collected and used;
2. Items of personal information to be collected;
3. Period for which personal information is held and used;
4. Fact that a subject of information has a right to reject to give his/her consent and details of
a disadvantage, if any, due to his/her rejection to give consent.