[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"article:kanren-joho":3},{"meta":4,"markdown":315,"quiz":316},{"type":5,"articleId":6,"slug":7,"title":8,"titleEn":9,"category":10,"order":11,"seriesLabel":12,"summary":13,"publishedAt":14,"image":15,"tags":16,"vocabulary":20,"quizId":311,"source":312},"article","kjh-k1-h05-kanren-joho","kanren-joho","課題Ⅰ 第５編 個人関連情報に関する義務（法31条）","Obligations Regarding Personal-Related Information (Article 31)","kojin-joho-hogo\u002Fkadai-1",1050,"課題Ⅰ 第５編","Comprehensive guide to personal-related information (個人関連情報) under Article 31 of the APPI: definition (Art. 2-7), the Rikunabi incident that exposed the legal gap, the 2020 amendment response, trigger conditions, consent-confirmation structure (provider confirms \u002F receiver obtains), foreign third-party requirements, record-keeping duties, comparison with Article 27, and key exam points.","2026-04-26T00:00:00Z","https:\u002F\u002Fimages.yamiyomi.com\u002Fkjh-k1-h05-kanren-joho.png",[17,18,19],"exam:個人情報保護士","topic:個人関連情報","law:法31条",[21,26,31,35,39,43,47,51,55,59,63,67,71,75,79,83,87,91,95,99,103,107,111,115,119,123,127,131,135,139,143,147,151,155,159,163,167,171,175,179,183,187,191,195,199,203,207,211,215,219,223,227,231,235,239,243,247,251,255,259,263,267,271,275,279,283,287,291,295,299,303,307],{"word":22,"reading":23,"meaning":24,"level":25},"個人関連情報","こじんかんれんじょうほう","personal-related information","N1",{"word":27,"reading":28,"meaning":29,"level":30},"生存","せいぞん","living, alive","N2",{"word":32,"reading":33,"meaning":34,"level":25},"仮名加工情報","かめいかこうじょうほう","pseudonymized information",{"word":36,"reading":37,"meaning":38,"level":25},"匿名加工情報","とくめいかこうじょうほう","anonymized information",{"word":40,"reading":41,"meaning":42,"level":30},"該当","がいとう","applicable, corresponding",{"word":44,"reading":45,"meaning":46,"level":30},"定義","ていぎ","definition",{"word":48,"reading":49,"meaning":50,"level":30},"閲覧","えつらん","browsing, viewing",{"word":52,"reading":53,"meaning":54,"level":30},"履歴","りれき","history, record",{"word":56,"reading":57,"meaning":58,"level":30},"購買","こうばい","purchase, buying",{"word":60,"reading":61,"meaning":62,"level":30},"端末","たんまつ","terminal, device",{"word":64,"reading":65,"meaning":66,"level":25},"潜在的","せんざいてき","potential, latent",{"word":68,"reading":69,"meaning":70,"level":30},"危険性","きけんせい","risk, danger",{"word":72,"reading":73,"meaning":74,"level":30},"識別","しきべつ","identification, distinguish",{"word":76,"reading":77,"meaning":78,"level":30},"第三者","だいさんしゃ","third party",{"word":80,"reading":81,"meaning":82,"level":30},"提供","ていきょう","provision, supply",{"word":84,"reading":85,"meaning":86,"level":25},"照合","しょうごう","cross-reference, verification",{"word":88,"reading":89,"meaning":90,"level":30},"想定","そうてい","assumption, expectation",{"word":92,"reading":93,"meaning":94,"level":30},"規制","きせい","regulation, restriction",{"word":96,"reading":97,"meaning":98,"level":30},"適用","てきよう","application, enforcement",{"word":100,"reading":101,"meaning":102,"level":30},"同意","どうい","consent, agreement",{"word":104,"reading":105,"meaning":106,"level":30},"確認","かくにん","confirmation, verification",{"word":108,"reading":109,"meaning":110,"level":30},"導入","どうにゅう","introduction, implementation",{"word":112,"reading":113,"meaning":114,"level":30},"背景","はいけい","background, context",{"word":116,"reading":117,"meaning":118,"level":30},"事件","じけん","incident, case",{"word":120,"reading":121,"meaning":122,"level":30},"就職","しゅうしょく","job hunting, employment",{"word":124,"reading":125,"meaning":126,"level":25},"内定辞退","ないていじたい","declining a job offer",{"word":128,"reading":129,"meaning":130,"level":25},"算出","さんしゅつ","calculation, computation",{"word":132,"reading":133,"meaning":134,"level":30},"販売","はんばい","sales, selling",{"word":136,"reading":137,"meaning":138,"level":25},"核心","かくしん","core, crux",{"word":140,"reading":141,"meaning":142,"level":30},"隙間","すきま","gap, crack",{"word":144,"reading":145,"meaning":146,"level":25},"露呈","ろてい","exposure, revelation",{"word":148,"reading":149,"meaning":150,"level":25},"契機","けいき","trigger, opportunity",{"word":152,"reading":153,"meaning":154,"level":30},"改正","かいせい","amendment, revision",{"word":156,"reading":157,"meaning":158,"level":30},"施行","しこう","enforcement, implementation",{"word":160,"reading":161,"meaning":162,"level":30},"規定","きてい","provisions, stipulations",{"word":164,"reading":165,"meaning":166,"level":25},"新設","しんせつ","newly established",{"word":168,"reading":169,"meaning":170,"level":30},"事業者","じぎょうしゃ","business operator",{"word":172,"reading":173,"meaning":174,"level":30},"義務","ぎむ","duty, obligation",{"word":176,"reading":177,"meaning":178,"level":25},"発動","はつどう","triggering, activation",{"word":180,"reading":181,"meaning":182,"level":25},"当該","とうがい","said, the relevant",{"word":184,"reading":185,"meaning":186,"level":25},"受領","じゅりょう","receipt, receiving",{"word":188,"reading":189,"meaning":190,"level":30},"合理的","ごうりてき","reasonable, rational",{"word":192,"reading":193,"meaning":194,"level":25},"予見","よけん","foresight, anticipation",{"word":196,"reading":197,"meaning":198,"level":30},"解釈","かいしゃく","interpretation",{"word":200,"reading":201,"meaning":202,"level":30},"連携","れんけい","linkage, cooperation",{"word":204,"reading":205,"meaning":206,"level":30},"収集","しゅうしゅう","collection, gathering",{"word":208,"reading":209,"meaning":210,"level":30},"取得","しゅとく","acquisition, obtaining",{"word":212,"reading":213,"meaning":214,"level":30},"年月日","ねんがっぴ","date (year\u002Fmonth\u002Fday)",{"word":216,"reading":217,"meaning":218,"level":30},"氏名","しめい","full name",{"word":220,"reading":221,"meaning":222,"level":30},"項目","こうもく","items, categories",{"word":224,"reading":225,"meaning":226,"level":30},"記録","きろく","record, documentation",{"word":228,"reading":229,"meaning":230,"level":30},"保存","ほぞん","preservation, storage",{"word":232,"reading":233,"meaning":234,"level":30},"構造","こうぞう","structure, framework",{"word":236,"reading":237,"meaning":238,"level":30},"主体","しゅたい","subject, agent",{"word":240,"reading":241,"meaning":242,"level":25},"起因","きいん","originate, cause",{"word":244,"reading":245,"meaning":246,"level":30},"蓄積","ちくせき","accumulation, storage",{"word":248,"reading":249,"meaning":250,"level":30},"結合","けつごう","combination, joining",{"word":252,"reading":253,"meaning":254,"level":25},"頻出","ひんしゅつ","frequent appearance",{"word":256,"reading":257,"meaning":258,"level":25},"論点","ろんてん","issue, point of argument",{"word":260,"reading":261,"meaning":262,"level":30},"措置","そち","measures, steps",{"word":264,"reading":265,"meaning":266,"level":30},"反省","はんせい","reflection, reconsideration",{"word":268,"reading":269,"meaning":270,"level":30},"枠組み","わくぐみ","framework",{"word":272,"reading":273,"meaning":274,"level":30},"段階","だんかい","stage, phase",{"word":276,"reading":277,"meaning":278,"level":30},"困難","こんなん","difficulty, hardship",{"word":280,"reading":281,"meaning":282,"level":30},"応募者","おうぼしゃ","applicant",{"word":284,"reading":285,"meaning":286,"level":30},"例外","れいがい","exception",{"word":288,"reading":289,"meaning":290,"level":25},"事由","じゆう","grounds, reason",{"word":292,"reading":293,"meaning":294,"level":30},"名称","めいしょう","name, title",{"word":296,"reading":297,"meaning":298,"level":30},"法人","ほうじん","corporation, legal entity",{"word":300,"reading":301,"meaning":302,"level":30},"広告","こうこく","advertising",{"word":304,"reading":305,"meaning":306,"level":30},"配信","はいしん","distribution, delivery",{"word":308,"reading":309,"meaning":310,"level":30},"顧客","こきゃく","customer, client","kjh-k1-h05-quiz",{"name":313,"url":314},"個人情報保護士試験対策","https:\u002F\u002Fwww.joho-gakushu.or.jp\u002Fpiip\u002F","\n::para\n[個人]{こじん:individual:N2}[関連]{かんれん:related:N3}[情報]{じょうほう:information:N3}とは、[法]{ほう:law:N3}2[条]{じょう:article:N1}7[項]{こう:paragraph:N1}において、[生存]{せいぞん:living:N3}する[個人]{こじん:individual:N2}に[関する]{かんする:related to:N3}[情報]{じょうほう:information:N3}であって、[個人]{こじん:individual:N2}[情報]{じょうほう:information:N3}、[仮名]{かめい:pseudonymized:N1}[加工]{かこう:processed:N3}[情報]{じょうほう:information:N3}、[匿名]{とくめい:anonymized:N1}[加工]{かこう:processed:N3}[情報]{じょうほう:information:N3}のいずれにも[該当]{がいとう:applicable:N1}しないものと[定義]{ていぎ:defined:N1}されている。つまり、[特定]{とくてい:specific:N3}の[個人]{こじん:individual:N2}を[識別]{しきべつ:identify:N3}できない[情報]{じょうほう:information:N3}でありながら、[個人]{こじん:individual:N2}に「[関する]{かんする:related to:N3}」[情報]{じょうほう:information:N3}である[点]{てん:point:N3}がポイントとなる。\n\n#en\nPersonal-related information is defined in Article 2, Paragraph 7 as information relating to a living individual that does not fall under personal information, pseudonymized information, or anonymized information. The key point is that while it cannot identify a specific individual, it is still information that \"relates to\" an individual.\n::\n\n::heading\n[具体的]{ぐたいてき:specific:N3}な[例]{れい:example:N3}と[潜在的]{せんざいてき:potential:N1}[危険性]{きけんせい:risk:N3}\n\n#en\nSpecific examples and potential risks\n::\n\n::para\n[具体的]{ぐたいてき:specifically:N3}な[例]{れい:example:N3}としては、クッキーID、[閲覧]{えつらん:browsing:N1}[履歴]{りれき:history:N1}、[購買]{こうばい:purchase:N1}[履歴]{りれき:history:N1}、[位置]{いち:location:N3}[情報]{じょうほう:data:N3}、[端末]{たんまつ:terminal, device:N1}[情報]{じょうほう:information:N3}、アプリ[利用]{りよう:usage:N3}[履歴]{りれき:history:N1}、[興味]{きょうみ:interest:N1}・[関心]{かんしん:concern:N3}プロフィールなどが[挙げ]{あげ:mention:N1}られる。これらは[単体]{たんたい:alone:N3}では[特定]{とくてい:specific:N3}の[個人]{こじん:individual:N2}を[識別]{しきべつ:identify:N3}できないため「[個人]{こじん:individual:N2}[情報]{じょうほう:information:N3}」には[当たらない]{あたらない:does not constitute:N3}が、[他]{ほか:other:N3}の[情報]{じょうほう:information:N3}と[組み合わせる]{くみあわせる:combine:N3}ことで[個人]{こじん:individual:N2}を[特定]{とくてい:specify:N3}できる[潜在的]{せんざいてき:potential:N1}な[危険性]{きけんせい:risk:N3}がある。\n\n#en\nSpecific examples include cookie IDs, browsing history, purchase history, location data, device information, app usage history, and interest\u002Fpreference profiles. Because these cannot identify a specific individual on their own, they do not constitute \"personal information\" — but they carry a potential risk of identifying individuals when combined with other information.\n::\n\n::heading\n[規制]{きせい:regulation:N3}[導入]{どうにゅう:introduction:N2}の[背景]{はいけい:background:N3}：リクナビ[事件]{じけん:incident:N3}\n\n#en\nBackground of the regulation: the Rikunabi incident\n::\n\n::para\nこの[概念]{がいねん:concept:N1}が[法律]{ほうりつ:law:N2}に[導入]{どうにゅう:introduced:N2}された[背景]{はいけい:background:N3}には、2019[年]{ねん:year:N5}に[大]{おお:great:N5}きな[社会]{しゃかい:social:N4}[問題]{もんだい:problem:N4}となった「リクナビ[事件]{じけん:incident:N3}」がある。[就職]{しゅうしょく:job hunting:N1}[情報]{じょうほう:information:N3}サイト「リクナビ」を[運営]{うんえい:operate:N2}するリクルートキャリア[社]{しゃ:company:N4}は、[学生]{がくせい:students:N5}のクッキー[情報]{じょうほう:data:N3}やサイト[閲覧]{えつらん:browsing:N1}[履歴]{りれき:history:N1}をAIで[分析]{ぶんせき:analysis:N1}し、[内定]{ないてい:informal job offer:N3}[辞退]{じたい:decline:N3}[率]{りつ:rate:N1}（[内定]{ないてい:informal job offer:N3}を[辞退]{じたい:decline:N3}する[確率]{かくりつ:probability:N1}）を[算出]{さんしゅつ:calculate:N2}するスコアを[開発]{かいはつ:develop:N4}した。このスコアは、[学生]{がくせい:students:N5}[本人]{ほんにん:the individual:N5}の[同意]{どうい:consent:N4}を[得る]{える:obtain:N3}ことなく、[採用]{さいよう:recruitment:N2}[活動]{かつどう:activities:N3}を[行う]{おこなう:conduct:N5}[企業]{きぎょう:companies:N1}に[販売]{はんばい:sold:N2}されていた。\n\n#en\nThe background to this concept being introduced into law was the \"Rikunabi incident,\" which became a major social issue in 2019. Recruit Career, which operated the job-hunting site \"Rikunabi,\" used AI to analyze students' cookie data and site browsing history to develop scores calculating the job-offer-decline rate (the probability a student would decline an informal job offer). These scores were sold to companies conducting recruitment activities without obtaining consent from the students themselves.\n::\n\n::para\n[問題]{もんだい:problem:N4}の[核心]{かくしん:core, crux:N1}は、クッキー[情報]{じょうほう:data:N3}[単体]{たんたい:alone:N3}では[個人]{こじん:individual:N2}[情報]{じょうほう:information:N3}に[該当]{がいとう:applicable:N1}しなかったため、[当時]{とうじ:at that time:N3}の[個人情報]{こじんじょうほう:personal information:N2}[保護法]{ほごほう:protection law:N1}では[規制]{きせい:regulate:N3}する[手段]{しゅだん:means:N3}がなかった[点]{てん:point:N3}にある。リクルートキャリア[側]{がわ:side:N3}ではクッキーIDと[個人]{こじん:individual:N2}が[紐付]{ひもづ:link:N1}いていなかったが、[提供]{ていきょう:provision:N1}を[受けた]{うけた:received:N3}[企業]{きぎょう:companies:N1}[側]{がわ:side:N3}では[応募者]{おうぼしゃ:applicant:N1}の[氏名]{しめい:full name:N1}と[照合]{しょうごう:cross-reference:N2}して[個人]{こじん:individual:N2}データになっていた。この「[法]{ほう:law:N3}の[隙間]{すきま:gap:N1}」が[露呈]{ろてい:exposed:N1}したことが、[法]{ほう:law:N3}[改正]{かいせい:amendment:N2}の[直接]{ちょくせつ:direct:N2}の[契機]{けいき:trigger:N1}となった。\n\n#en\nThe crux of the problem was that cookie data alone did not constitute personal information, so the Personal Information Protection Act at the time had no means to regulate this practice. On Recruit Career's side, cookie IDs were not linked to individuals, but on the receiving companies' side, the data was cross-referenced with applicants' names to become personal data. The exposure of this \"gap in the law\" became the direct trigger for the amendment.\n::\n\n::callout\nクッキー[単体]{たんたい:alone:N3} ＝ [個人]{こじん:individual:N2}[関連]{かんれん:related:N3}[情報]{じょうほう:information:N3}。クッキー ＋ [氏名]{しめい:full name:N1}で[紐付け]{ひもづけ:linking:N1} ＝ [個人]{こじん:individual:N2}[情報]{じょうほう:information:N3}。この「[紐付け]{ひもづけ:linking:N1}の[行為]{こうい:act:N1}」こそが[法]{ほう:law:N3}31[条]{じょう:article:N1}の[規制]{きせい:regulation:N3}[対象]{たいしょう:target:N2}である。\n\n#en\nCookie alone = personal-related information. Cookie + full name linked = personal information. It is precisely this \"act of linking\" that Article 31 regulates.\n::\n\n::heading\n2020[年]{ねん:year:N5}[改正]{かいせい:amendment:N2}による[法]{ほう:law:N3}31[条]{じょう:article:N1}の[新設]{しんせつ:establishment:N2}\n\n#en\nEstablishment of Article 31 through the 2020 amendment\n::\n\n::para\nこの[反省]{はんせい:reflection:N2}を[踏まえ]{ふまえ:based on:N1}、2020[年]{ねん:year:N5}[改正]{かいせい:amendment:N2}（2022[年]{ねん:year:N5}4[月]{がつ:month:N5}[施行]{しこう:enforcement:N1}）で[新た]{あらた:newly:N4}に[法]{ほう:law:N3}31[条]{じょう:article:N1}が[設け]{もうけ:establish:N2}られ、[個人]{こじん:individual:N2}[関連]{かんれん:related:N3}[情報]{じょうほう:information:N3}の[第三者]{だいさんしゃ:third party:N1}[提供]{ていきょう:provision:N1}に[関する]{かんする:regarding:N3}[規定]{きてい:provisions:N3}が[新設]{しんせつ:newly established:N2}された。これにより、リクナビ[事件]{じけん:incident:N3}のような[事案]{じあん:case, matter:N1}に[対応]{たいおう:respond:N1}できる[法的]{ほうてき:legal:N3}[枠組み]{わくぐみ:framework:N1}が[整備]{せいび:established:N1}された。\n\n#en\nBased on this reflection, the 2020 amendment (enforced April 2022) newly established Article 31, creating provisions regarding the third-party provision of personal-related information. This put in place a legal framework capable of addressing cases like the Rikunabi incident.\n::\n\n::heading\n[法]{ほう:law:N3}31[条]{じょう:article:N1}：[発動]{はつどう:trigger:N4}[条件]{じょうけん:condition:N1}と[義務]{ぎむ:duty:N1}の[内容]{ないよう:content:N3}\n\n#en\nArticle 31: trigger conditions and content of duties\n::\n\n::para\n[法]{ほう:law:N3}31[条]{じょう:article:N1}の[規制]{きせい:regulation:N3}が[発動]{はつどう:triggered:N4}する[条件]{じょうけん:condition:N1}は、[個人]{こじん:individual:N2}[関連]{かんれん:related:N3}[情報]{じょうほう:information:N3}を[第三者]{だいさんしゃ:third party:N1}に[提供]{ていきょう:provision:N1}する[際]{さい:occasion:N3}に、その[第三者]{だいさんしゃ:third party:N1}が[当該]{とうがい:said, the relevant:N1}[個人]{こじん:individual:N2}[関連]{かんれん:related:N3}[情報]{じょうほう:information:N3}を[個人]{こじん:individual:N2}データとして[取得]{しゅとく:acquire:N3}することが「[想定]{そうてい:expected:N3}される」[場合]{ばあい:case:N3}である。すなわち、[受領]{じゅりょう:receipt:N2}[側]{がわ:side:N3}が[他]{ほか:other:N3}の[情報]{じょうほう:information:N3}と[照合]{しょうごう:cross-reference:N2}して[特定]{とくてい:specific:N3}の[個人]{こじん:individual:N2}を[識別]{しきべつ:identify:N3}できる[状態]{じょうたい:state:N1}にすることが[見込まれる]{みこまれる:anticipated:N3}[場合]{ばあい:case:N3}に、この[規制]{きせい:regulation:N3}が[適用]{てきよう:applied:N3}される。\n\n#en\nThe trigger condition for Article 31's regulation is when personal-related information is provided to a third party and it is \"expected\" that the third party will acquire it as personal data. In other words, the regulation applies when it is anticipated that the receiving side will cross-reference it with other information to reach a state where specific individuals can be identified.\n::\n\n::para\nここで[重要]{じゅうよう:important:N3}なのは、「[想定]{そうてい:expected:N3}される」の[解釈]{かいしゃく:interpretation:N1}である。[提供]{ていきょう:provision:N1}[元]{もと:source:N4}が[実際]{じっさい:actually:N3}に[知って]{しって:know:N4}いる[場合]{ばあい:case:N3}だけでなく、[通常]{つうじょう:normally:N3}の[判断力]{はんだんりょく:judgment:N3}を[持つ]{もつ:to have:N4}[事業者]{じぎょうしゃ:business operator:N4}であれば[合理的]{ごうりてき:reasonable:N3}に[予見]{よけん:foresee:N3}できる[場合]{ばあい:case:N3}も[含まれる]{ふくまれる:included:N2}。[例えば]{たとえば:for example:N3}、[提供]{ていきょう:provision:N1}[先]{さき:destination:N5}が[会員]{かいいん:member:N4}データベースを[保有]{ほゆう:possess:N1}していることを[知って]{しって:know:N4}いる[場合]{ばあい:case:N3}や、クッキー[同期]{どうき:synchronization:N3}の[仕組み]{しくみ:mechanism:N3}を[利用]{りよう:utilize:N3}する[場合]{ばあい:case:N3}は、[当然]{とうぜん:naturally:N3}に「[想定]{そうてい:expected:N3}される」と[判断]{はんだん:judged:N3}される。\n\n#en\nWhat is important here is the interpretation of \"expected.\" This includes not only cases where the provider actually knows, but also cases where a business operator with ordinary judgment could reasonably foresee it. For example, if the provider knows that the recipient possesses a member database, or if they use a cookie synchronization mechanism, it is naturally judged as \"expected.\"\n::\n\n::para\n[法]{ほう:law:N3}31[条]{じょう:article:N1}1[項]{こう:paragraph:N1}1[号]{ごう:item:N3}により、[提供]{ていきょう:provision:N1}[元]{もと:source:N4}の[事業者]{じぎょうしゃ:business operator:N4}は、[提供]{ていきょう:provision:N1}[先]{さき:destination:N5}の[第三者]{だいさんしゃ:third party:N1}が[本人]{ほんにん:the individual:N5}の[同意]{どうい:consent:N4}を[得て]{えて:obtained:N3}いることを[確認]{かくにん:confirm:N3}する[義務]{ぎむ:duty:N1}を[負う]{おう:to bear:N3}。ここで[注意]{ちゅうい:attention:N4}すべきは、[同意]{どうい:consent:N4}を[取得]{しゅとく:obtain:N3}するのは[提供]{ていきょう:provision:N1}[元]{もと:source:N4}ではなく[提供]{ていきょう:provision:N1}[先]{さき:destination:N5}の[第三者]{だいさんしゃ:third party:N1}である[点]{てん:point:N3}である。[提供]{ていきょう:provision:N1}[元]{もと:source:N4}の[義務]{ぎむ:duty:N1}は、あくまで[同意]{どうい:consent:N4}[取得]{しゅとく:obtaining:N3}の「[確認]{かくにん:confirm:N3}」である。\n\n#en\nUnder Article 31, Paragraph 1, Item 1, the providing business operator bears a duty to confirm that the receiving third party has obtained consent from the individual. The critical point to note here is that the party obtaining consent is the receiving third party, not the provider. The provider's duty is strictly one of \"confirmation\" that consent has been obtained.\n::\n\n::callout\n[個人]{こじん:individual:N2}[関連]{かんれん:related:N3}[情報]{じょうほう:information:N3}は「[個人]{こじん:individual:N2}[情報]{じょうほう:information:N3}」ではないため、[通常]{つうじょう:ordinary:N3}の[第三者]{だいさんしゃ:third party:N1}[提供]{ていきょう:provision:N1}ルール（[法]{ほう:law:N3}27[条]{じょう:article:N1}）は[適用]{てきよう:apply:N3}されない。[法]{ほう:law:N3}31[条]{じょう:article:N1}がこの[隙間]{すきま:gap:N1}を[埋める]{うめる:fill:N2}。\n\n#en\nPersonal-related information is NOT \"personal information,\" so the ordinary third-party provision rules (Art. 27) do not apply. Article 31 fills this gap.\n::\n\n::para\n[提供]{ていきょう:provision:N1}[先]{さき:destination:N5}が[外国]{がいこく:foreign country:N5}にある[第三者]{だいさんしゃ:third party:N1}の[場合]{ばあい:case:N3}には、[追加]{ついか:additional:N3}の[要件]{ようけん:requirement:N3}がある（[法]{ほう:law:N3}31[条]{じょう:article:N1}1[項]{こう:paragraph:N1}2[号]{ごう:item:N3}）。この[場合]{ばあい:case:N3}、[提供]{ていきょう:provision:N1}[元]{もと:source:N4}は、[法]{ほう:law:N3}28[条]{じょう:article:N1}に[相当]{そうとう:equivalent:N3}する[措置]{そち:measures:N1}が[講じ]{こうじ:taken:N2}られていることも[確認]{かくにん:confirm:N3}しなければならない。すなわち、[外国]{がいこく:foreign country:N5}の[第三者]{だいさんしゃ:third party:N1}が[適切]{てきせつ:appropriate:N3}な[保護]{ほご:protection:N1}[体制]{たいせい:system:N3}を[整備]{せいび:established:N1}しているか[確認]{かくにん:confirm:N3}する[義務]{ぎむ:duty:N1}が[加わる]{くわわる:added:N3}。\n\n#en\nWhen the receiving third party is located in a foreign country, there are additional requirements (Article 31, Paragraph 1, Item 2). In this case, the provider must also confirm that measures equivalent to Article 28 have been taken. That is, a duty is added to confirm that the foreign third party has established an appropriate protection system.\n::\n\n::para\nガイドラインの[解釈]{かいしゃく:interpretation:N1}によれば、「[提供]{ていきょう:provision:N1}」の[概念]{がいねん:concept:N1}は[広く]{ひろく:broadly:N4}[捉え]{とらえ:interpreted:N1}られている。APIを[通じた]{つうじた:through:N4}データ[連携]{れんけい:linkage:N1}、タグ・クッキー[同期]{どうき:synchronization:N3}（クッキーシンク）による[情報]{じょうほう:information:N3}の[受け渡し]{うけわたし:handover:N3}、[第三者]{だいさんしゃ:third party:N1}がウェブサイトに[設置]{せっち:installed:N2}したタグを[通じて]{つうじて:through:N4}[情報]{じょうほう:information:N3}を[収集]{しゅうしゅう:collect:N3}させる[行為]{こうい:act:N1}なども、[法]{ほう:law:N3}31[条]{じょう:article:N1}の「[提供]{ていきょう:provision:N1}」に[該当]{がいとう:applicable:N1}し[得る]{うる:can:N3}。[技術的]{ぎじゅつてき:technical:N2}な[手段]{しゅだん:means:N3}を[問わず]{とわず:regardless:N4}、[実質的]{じっしつてき:substantively:N3}に[個人]{こじん:individual:N2}[関連]{かんれん:related:N3}[情報]{じょうほう:information:N3}が[第三者]{だいさんしゃ:third party:N1}に[渡る]{わたる:transfer:N3}[場合]{ばあい:case:N3}は[対象]{たいしょう:subject:N2}となる。\n\n#en\nAccording to the guidelines' interpretation, the concept of \"provision\" is interpreted broadly. Data linkage through APIs, information handover through tag\u002Fcookie synchronization (cookie sync), and acts of allowing third parties to collect information through tags installed on websites can all constitute \"provision\" under Article 31. Regardless of the technical means, cases where personal-related information substantively transfers to a third party are subject to the regulation.\n::\n\n::heading\n[確認]{かくにん:confirmation:N3}・[記録]{きろく:record:N2}[義務]{ぎむ:duty:N1}\n\n#en\nConfirmation and record-keeping duties\n::\n\n::para\n[提供]{ていきょう:provision:N1}[元]{もと:source:N4}の[事業者]{じぎょうしゃ:business operator:N4}が[確認]{かくにん:confirm:N3}すべき[事項]{じこう:matters:N1}は、[主]{おも:main:N4}に[二]{ふた:two:N5}つある。[第一]{だいいち:first:N1}に、[提供]{ていきょう:provision:N1}[先]{さき:destination:N5}の[第三者]{だいさんしゃ:third party:N1}が[本人]{ほんにん:the individual:N5}の[同意]{どうい:consent:N4}を[取得]{しゅとく:obtain:N3}していること。[第二]{だいに:second:N1}に、[第三者]{だいさんしゃ:third party:N1}が[例外]{れいがい:exception:N3}[事由]{じゆう:grounds:N3}に[該当]{がいとう:applicable:N1}する[場合]{ばあい:case:N3}はその[旨]{むね:effect:N1}。[確認]{かくにん:confirm:N3}の[方法]{ほうほう:method:N3}としては、[提供]{ていきょう:provision:N1}[先]{さき:destination:N5}から[申告]{しんこく:declaration:N3}を[受ける]{うける:receive:N3}ことが[一般的]{いっぱんてき:typical:N2}である。\n\n#en\nThere are mainly two matters the providing business operator must confirm. First, that the receiving third party has obtained the individual's consent. Second, if the third party falls under an exception, that fact. As for the method of confirmation, it is typical to receive a declaration from the receiving party.\n::\n\n::para\nまた、[提供]{ていきょう:provision:N1}[元]{もと:source:N4}には[記録]{きろく:record:N2}[作成]{さくせい:creation:N3}・[保存]{ほぞん:preservation:N1}の[義務]{ぎむ:duty:N1}も[課される]{かされる:imposed:N2}。[記録]{きろく:record:N2}すべき[事項]{じこう:matters:N1}は、[提供]{ていきょう:provision:N1}した[年月日]{ねんがっぴ:date:N5}、[提供]{ていきょう:provision:N1}[先]{さき:destination:N5}の[第三者]{だいさんしゃ:third party:N1}の[氏名]{しめい:name:N1}（[法人]{ほうじん:corporation:N3}の[場合]{ばあい:case:N3}は[名称]{めいしょう:name, title:N1}）、[提供]{ていきょう:provision:N1}した[個人]{こじん:individual:N2}[関連]{かんれん:related:N3}[情報]{じょうほう:information:N3}の[項目]{こうもく:items:N1}である。[保存]{ほぞん:preservation:N1}[期間]{きかん:period:N3}は[法]{ほう:law:N3}29[条]{じょう:article:N1}の[第三者]{だいさんしゃ:third party:N1}[提供]{ていきょう:provision:N1}[記録]{きろく:record:N2}と[同様]{どうよう:same:N3}の[枠組み]{わくぐみ:framework:N1}に[従う]{したがう:follow:N1}。\n\n#en\nAdditionally, the provider is also imposed with a duty to create and preserve records. The matters to be recorded are: the date of provision, the name of the receiving third party (or corporate name in the case of a corporation), and the items of personal-related information provided. The retention period follows the same framework as the third-party provision records under Article 29.\n::\n\n::heading\n[法]{ほう:law:N3}27[条]{じょう:article:N1}との[構造的]{こうぞうてき:structural:N2}[比較]{ひかく:comparison:N1}\n\n#en\nStructural comparison with Article 27\n::\n\n::para\n[法]{ほう:law:N3}27[条]{じょう:article:N1}（[通常]{つうじょう:ordinary:N3}の[個人]{こじん:individual:N2}データの[第三者]{だいさんしゃ:third party:N1}[提供]{ていきょう:provision:N1}）と[法]{ほう:law:N3}31[条]{じょう:article:N1}の[構造的]{こうぞうてき:structural:N2}な[違い]{ちがい:difference:N3}を[理解]{りかい:understand:N3}することが[試験]{しけん:exam:N4}[対策]{たいさく:preparation:N1}の[鍵]{かぎ:key:N1}となる。[法]{ほう:law:N3}27[条]{じょう:article:N1}では、[提供]{ていきょう:provision:N1}[元]{もと:source:N4}[自身]{じしん:oneself:N4}が[本人]{ほんにん:the individual:N5}の[同意]{どうい:consent:N4}を[取得]{しゅとく:obtain:N3}する。[法]{ほう:law:N3}31[条]{じょう:article:N1}では、[同意]{どうい:consent:N4}[取得]{しゅとく:obtaining:N3}の[主体]{しゅたい:subject, agent:N4}は[提供]{ていきょう:provision:N1}[先]{さき:destination:N5}であり、[提供]{ていきょう:provision:N1}[元]{もと:source:N4}はその[確認]{かくにん:confirmation:N3}を[行う]{おこなう:conduct:N5}。この[違い]{ちがい:difference:N3}は、[個人]{こじん:individual:N2}[関連]{かんれん:related:N3}[情報]{じょうほう:information:N3}が[提供]{ていきょう:provision:N1}[元]{もと:source:N4}の[段階]{だんかい:stage:N2}では[個人]{こじん:individual:N2}を[特定]{とくてい:identify:N3}できないため、[提供]{ていきょう:provision:N1}[元]{もと:source:N4}が[本人]{ほんにん:the individual:N5}に[同意]{どうい:consent:N4}を[求める]{もとめる:request:N3}こと[自体]{じたい:itself:N4}が[不可能]{ふかのう:impossible:N3}であることに[起因]{きいん:originate:N3}する。\n\n#en\nUnderstanding the structural difference between Article 27 (ordinary third-party provision of personal data) and Article 31 is the key to exam preparation. Under Article 27, the provider itself obtains the individual's consent. Under Article 31, the party obtaining consent is the receiver, and the provider conducts the confirmation. This difference originates from the fact that at the provider's stage, personal-related information cannot identify individuals, making it impossible for the provider to request consent from the individual in the first place.\n::\n\n::callout\nDMP（データ・マネジメント・プラットフォーム）[事業者]{じぎょうしゃ:business operator:N4}は、[法]{ほう:law:N3}31[条]{じょう:article:N1}の[主要]{しゅよう:primary:N3}な[規制]{きせい:regulation:N3}[対象]{たいしょう:target:N2}である。\n\n#en\nDMP (Data Management Platform) operators are the primary regulatory target of Article 31.\n::\n\n::para\nDMP（データ・マネジメント・プラットフォーム）[事業者]{じぎょうしゃ:business operator:N4}は、[法]{ほう:law:N3}31[条]{じょう:article:N1}の[主要]{しゅよう:primary:N3}な[適用]{てきよう:application:N3}[対象]{たいしょう:target:N2}である。DMP[事業者]{じぎょうしゃ:business operator:N4}は、ウェブサイト[閲覧]{えつらん:browsing:N1}[履歴]{りれき:history:N1}や[購買]{こうばい:purchase:N1}[履歴]{りれき:history:N1}などの[個人]{こじん:individual:N2}[関連]{かんれん:related:N3}[情報]{じょうほう:information:N3}を[大量]{たいりょう:large volume:N2}に[蓄積]{ちくせき:accumulate:N1}し、[広告]{こうこく:advertising:N3}[配信]{はいしん:distribution:N3}などの[目的]{もくてき:purpose:N4}で[第三者]{だいさんしゃ:third party:N1}に[提供]{ていきょう:provision:N1}する。[提供]{ていきょう:provision:N1}[先]{さき:destination:N5}の[企業]{きぎょう:companies:N1}が[自社]{じしゃ:own company:N4}の[顧客]{こきゃく:customer:N1}データと[結合]{けつごう:combine:N1}すれば[個人]{こじん:individual:N2}データとなるため、まさに[法]{ほう:law:N3}31[条]{じょう:article:N1}が[想定]{そうてい:expected:N3}する[場面]{ばめん:scenario:N3}に[該当]{がいとう:applicable:N1}する。\n\n#en\nDMP (Data Management Platform) operators are the primary target of Article 31. DMP operators accumulate large volumes of personal-related information such as website browsing history and purchase history, and provide it to third parties for purposes like advertising distribution. Because it becomes personal data when the receiving companies combine it with their own customer data, this is precisely the scenario Article 31 envisions.\n::\n\n::heading\n[試験]{しけん:exam:N4}の[頻出]{ひんしゅつ:frequently appearing:N1}ポイント\n\n#en\nFrequently tested exam points\n::\n\n::para\n[試験]{しけん:exam:N4}では、[以下]{いか:the following:N4}の[三]{みっ:three:N5}つの[論点]{ろんてん:issue, point:N3}が[頻出]{ひんしゅつ:frequently appearing:N1}する。[第一]{だいいち:first:N1}に、[法]{ほう:law:N3}31[条]{じょう:article:N1}と[法]{ほう:law:N3}27[条]{じょう:article:N1}の[構造的]{こうぞうてき:structural:N2}な[違い]{ちがい:difference:N3}（[誰]{だれ:who:N3}が[同意]{どうい:consent:N4}を[取得]{しゅとく:obtain:N3}するか）。[第二]{だいに:second:N1}に、この[規定]{きてい:provision:N3}が[設け]{もうけ:establish:N2}られた[契機]{けいき:trigger:N1}（リクナビ[事件]{じけん:incident:N3}）。[第三]{だいさん:third:N1}に、[義務]{ぎむ:duty:N1}が[発生]{はっせい:arise:N4}する[条件]{じょうけん:condition:N1}（[受領]{じゅりょう:receipt:N2}[側]{がわ:side:N3}が[個人]{こじん:individual:N2}データを[作成]{さくせい:create:N3}することが「[想定]{そうてい:expected:N3}される」[場合]{ばあい:case:N3}）。これらの[論点]{ろんてん:points:N3}を[正確]{せいかく:accurately:N3}に[押さえて]{おさえて:grasp:N3}おくことが[合格]{ごうかく:passing:N3}への[近道]{ちかみち:shortcut:N4}である。\n\n#en\nThree issues frequently appear on the exam. First, the structural difference between Article 31 and Article 27 (who obtains consent). Second, the trigger for establishing this provision (the Rikunabi incident). Third, the condition under which the obligation arises (when it is \"expected\" that the receiving side will create personal data). Accurately grasping these points is the shortcut to passing.\n::\n\n::callout\n[法]{ほう:law:N3}31[条]{じょう:article:N1}と[法]{ほう:law:N3}27[条]{じょう:article:N1}の[最大]{さいだい:biggest:N3}の[違い]{ちがい:difference:N3}は[何]{なに:what:N5}か？→ [同意]{どうい:consent:N4}[取得]{しゅとく:obtaining:N3}の[主体]{しゅたい:subject:N4}が[異なる]{ことなる:different:N1}。[法]{ほう:law:N3}27[条]{じょう:article:N1}＝[提供]{ていきょう:provision:N1}[元]{もと:source:N4}。[法]{ほう:law:N3}31[条]{じょう:article:N1}＝[提供]{ていきょう:provision:N1}[先]{さき:destination:N5}。\n\n#en\nWhat is the biggest difference between Art. 31 and Art. 27? → The party that obtains consent differs. Art. 27 = provider. Art. 31 = receiver.\n::\n\n::callout\n[法]{ほう:law:N3}31[条]{じょう:article:N1}が[新設]{しんせつ:established:N2}された[契機]{けいき:trigger:N1}は？→ 2019[年]{ねん:year:N5}のリクナビ[事件]{じけん:incident:N3}。クッキー[情報]{じょうほう:data:N3}を[基]{もと:basis:N1}に[内定]{ないてい:informal offer:N3}[辞退]{じたい:decline:N3}[率]{りつ:rate:N1}を[算出]{さんしゅつ:calculate:N2}し、[無断]{むだん:without permission:N3}で[企業]{きぎょう:companies:N1}に[販売]{はんばい:sold:N2}した[事案]{じあん:case:N1}。\n\n#en\nWhat triggered the establishment of Art. 31? → The 2019 Rikunabi incident, where job-offer-decline scores were calculated from cookie data and sold to companies without permission.\n::\n\n::callout\n[法]{ほう:law:N3}31[条]{じょう:article:N1}の[義務]{ぎむ:duty:N1}はいつ[発生]{はっせい:arise:N4}するか？→ [提供]{ていきょう:provision:N1}[先]{さき:destination:N5}が[個人]{こじん:individual:N2}データとして[取得]{しゅとく:acquire:N3}することが「[想定]{そうてい:expected:N3}される」[場合]{ばあい:case:N3}。[提供]{ていきょう:provision:N1}[元]{もと:source:N4}が[知って]{しって:know:N4}いる[場合]{ばあい:case:N3}だけでなく、[合理的]{ごうりてき:reasonably:N3}に[予見]{よけん:foresee:N3}できる[場合]{ばあい:case:N3}も[含む]{ふくむ:include:N2}。\n\n#en\nWhen does the Art. 31 obligation arise? → When it is \"expected\" that the receiver will acquire the data as personal data. This includes not only when the provider knows, but also when it is reasonably foreseeable.\n::\n",{"id":311,"title":317,"titleEn":318,"topicPath":319,"questions":320},"第５編 個人関連情報 確認テスト","Chapter 5: Personally Referable Information — Practice Test","software\u002Fkojin-joho-hogo\u002Fkadai-1\u002Fhen-05-kojin-kanren-joho",[321,347,370,394],{"id":322,"articleId":6,"question":323,"options":326,"correctLabel":332,"explanation":343,"tags":346},"kjh-k1-h05-q01",{"en":324,"jp":325},"Which of the following correctly defines \"personally referable information\"?","「[個人]{こじん:personal}[関連]{かんれん:related}[情報]{じょうほう:information}」の[定義]{ていぎ:definition}として[正]{ただ:correct}しいものはどれか。",[327,331,335,339],{"label":328,"jp":329,"en":330},"ア","[個人]{こじん:personal}[情報]{じょうほう:information}と[同]{おな:same}じ[意味]{いみ:meaning}である","It has the same meaning as personal information",{"label":332,"jp":333,"en":334},"イ","[生存]{せいぞん:living}する[個人]{こじん:individual}に[関]{かん:related}する[情報]{じょうほう:information}であって、[個人]{こじん:personal}[情報]{じょうほう:information}、[仮名]{かめい:pseudonymized}[加工]{かこう:processed}[情報]{じょうほう:information}、[匿名]{とくめい:anonymized}[加工]{かこう:processed}[情報]{じょうほう:information}のいずれにも[該当]{がいとう:applicable}しないもの","Information related to a living individual that does not fall under personal information, pseudonymized information, or anonymized information",{"label":336,"jp":337,"en":338},"ウ","[法人]{ほうじん:corporation}に[関]{かん:related}する[情報]{じょうほう:information}も[含]{ふく:included}む","Includes information related to corporations",{"label":340,"jp":341,"en":342},"エ","[死者]{ししゃ:deceased}の[情報]{じょうほう:information}も[対象]{たいしょう:subject}となる","Information about deceased persons is also covered",{"en":344,"jp":345},"Personally referable information is information related to a living individual that does not fall under personal information, pseudonymized information, or anonymized information. Typical examples include cookie data and IP addresses.","[個人]{こじん:personal}[関連]{かんれん:related}[情報]{じょうほう:information}は、[生存]{せいぞん:living}する[個人]{こじん:individual}に[関]{かん:related}する[情報]{じょうほう:information}で、[個人]{こじん:personal}[情報]{じょうほう:information}・[仮名]{かめい:pseudonymized}[加工]{かこう:processed}[情報]{じょうほう:information}・[匿名]{とくめい:anonymized}[加工]{かこう:processed}[情報]{じょうほう:information}のいずれにも[該当]{がいとう:applicable}しないもの。Cookie[情報]{じょうほう:information}やIPアドレスなどが[典型例]{てんけいれい:typical examples}。",[22,44],{"id":348,"articleId":6,"question":349,"options":352,"correctLabel":332,"explanation":365,"tags":368},"kjh-k1-h05-q02",{"en":350,"jp":351},"Which incident led to the introduction of regulations on personally referable information?","[個人]{こじん:personal}[関連]{かんれん:related}[情報]{じょうほう:information}の[規制]{きせい:regulation}が[導入]{どうにゅう:introduced}されるきっかけとなった[事件]{じけん:incident}はどれか。",[353,356,359,362],{"label":328,"jp":354,"en":355},"ベネッセ[事件]{じけん:incident}","Benesse incident",{"label":332,"jp":357,"en":358},"リクナビ[事件]{じけん:incident}","Rikunabi incident",{"label":336,"jp":360,"en":361},"[年金]{ねんきん:pension}[機構]{きこう:organization}[情報]{じょうほう:information}[流出]{りゅうしゅつ:leak}[事件]{じけん:incident}","Japan Pension Service data leak incident",{"label":340,"jp":363,"en":364},"Yahoo! BB[事件]{じけん:incident}","Yahoo! BB incident",{"en":366,"jp":367},"In the Rikunabi incident, job offer decline rates of job-seeking students were calculated from cookie data and provided to companies. This incident triggered the introduction of regulations on personally referable information.","リクナビ[事件]{じけん:incident}では、[就活生]{しゅうかつせい:job-seeking students}の[内定]{ないてい:job offer}[辞退]{じたい:decline}[率]{りつ:rate}をCookie[情報]{じょうほう:information}から[算出]{さんしゅつ:calculated}し[企業]{きぎょう:companies}に[提供]{ていきょう:provided}していた。この[事件]{じけん:incident}が[個人]{こじん:personal}[関連]{かんれん:related}[情報]{じょうほう:information}の[規制]{きせい:regulation}[導入]{どうにゅう:introduction}の[契機]{けいき:trigger}となった。",[369,22],"リクナビ事件",{"id":371,"articleId":372,"question":373,"options":376,"correctLabel":332,"explanation":389,"tags":392},"kjh-k1-h05-q03","kjh-k1-h02-kihon-rinen",{"en":374,"jp":375},"Which of the following is correct about the regulation on third-party provision of personally referable information under Article 31?","[法]{ほう:law}[第]{だい:article}31[条]{じょう:article}の[個人]{こじん:personal}[関連]{かんれん:related}[情報]{じょうほう:information}の[第三者]{だいさんしゃ:third party}[提供]{ていきょう:provision}[規制]{きせい:regulation}について[正]{ただ:correct}しいものはどれか。",[377,380,383,386],{"label":328,"jp":378,"en":379},"[提供]{ていきょう:provision}[元]{もと:source}が[本人]{ほんにん:individual}の[同意]{どうい:consent}を[取得]{しゅとく:obtain}する[義務]{ぎむ:obligation}を[負]{お:bear}う","The provider bears the obligation to obtain the individual's consent",{"label":332,"jp":381,"en":382},"[提供]{ていきょう:provision}[先]{さき:destination}が[個人]{こじん:personal}データとして[取得]{しゅとく:acquire}することが[想定]{そうてい:anticipated}される[場合]{ばあい:case}、[提供]{ていきょう:provision}[元]{もと:source}は[本人]{ほんにん:individual}の[同意]{どうい:consent}が[得]{え:obtained}られていることを[確認]{かくにん:confirm}する[義務]{ぎむ:obligation}がある","When the recipient is anticipated to acquire it as personal data, the provider must confirm that consent has been obtained",{"label":336,"jp":384,"en":385},"[個人]{こじん:personal}[関連]{かんれん:related}[情報]{じょうほう:information}は[自由]{じゆう:freely}に[第三者]{だいさんしゃ:third party}[提供]{ていきょう:provision}できる","Personally referable information can be freely provided to third parties",{"label":340,"jp":387,"en":388},"[同意]{どうい:consent}は[提供]{ていきょう:provision}[先]{さき:destination}ではなく[提供]{ていきょう:provision}[元]{もと:source}に[対]{たい:towards}して[行]{おこな:done}う","Consent is given to the provider, not the recipient",{"en":390,"jp":391},"Under Article 31, when the recipient will acquire the data as personal data, the provider must confirm that the recipient has obtained the individual's consent. The obligation to obtain consent lies with the recipient.","[法]{ほう:law}[第]{だい:article}31[条]{じょう:article}では、[提供]{ていきょう:provision}[先]{さき:destination}が[個人]{こじん:personal}データとして[取得]{しゅとく:acquire}する[場合]{ばあい:case}、[提供]{ていきょう:provision}[元]{もと:source}は[提供]{ていきょう:provision}[先]{さき:destination}が[本人]{ほんにん:individual}の[同意]{どうい:consent}を[得]{え:obtained}ていることを[確認]{かくにん:confirm}しなければならない。[同意]{どうい:consent}の[取得]{しゅとく:acquisition}[義務]{ぎむ:obligation}は[提供]{ていきょう:provision}[先]{さき:destination}にある。",[393,22],"31条",{"id":395,"articleId":6,"question":396,"options":399,"correctLabel":336,"explanation":412,"tags":415},"kjh-k1-h05-q04",{"en":397,"jp":398},"Which correctly describes a structural difference between the regulation on personally referable information (Article 31) and the regulation on third-party provision (Article 27)?","[個人]{こじん:personal}[関連]{かんれん:related}[情報]{じょうほう:information}の[規制]{きせい:regulation}（[法]{ほう:law}[第]{だい:article}31[条]{じょう:article}）と[第三者]{だいさんしゃ:third party}[提供]{ていきょう:provision}[規制]{きせい:regulation}（[法]{ほう:law}[第]{だい:article}27[条]{じょう:article}）の[構造的]{こうぞうてき:structural}な[違]{ちが:difference}いとして[正]{ただ:correct}しいものはどれか。",[400,403,406,409],{"label":328,"jp":401,"en":402},"[法]{ほう:law}27[条]{じょう:article}は[提供]{ていきょう:provision}[先]{さき:destination}に[同意]{どうい:consent}[取得]{しゅとく:acquisition}[義務]{ぎむ:obligation}を[課]{か:impose}す","Article 27 imposes the consent obligation on the recipient",{"label":332,"jp":404,"en":405},"[法]{ほう:law}31[条]{じょう:article}は[提供]{ていきょう:provision}[元]{もと:source}に[本人]{ほんにん:individual}[同意]{どうい:consent}[取得]{しゅとく:acquisition}[義務]{ぎむ:obligation}を[課]{か:impose}す","Article 31 imposes the consent obligation on the provider",{"label":336,"jp":407,"en":408},"[法]{ほう:law}27[条]{じょう:article}は[提供]{ていきょう:provision}[元]{もと:source}に[同意]{どうい:consent}[取得]{しゅとく:acquisition}[義務]{ぎむ:obligation}を[課]{か:impose}し、[法]{ほう:law}31[条]{じょう:article}は[提供]{ていきょう:provision}[元]{もと:source}に[確認]{かくにん:confirmation}[義務]{ぎむ:obligation}を[課]{か:impose}す","Article 27 imposes consent obligation on the provider; Article 31 imposes confirmation obligation on the provider",{"label":340,"jp":410,"en":411},"[両者]{りょうしゃ:both}に[構造的]{こうぞうてき:structural}な[違]{ちが:difference}いはない","There is no structural difference between them",{"en":413,"jp":414},"Article 27 imposes the consent obligation on the provider (the business operator holding personal data). Article 31 imposes on the provider the obligation to \"confirm whether the recipient has obtained consent\" — a structurally different approach.","[法]{ほう:law}27[条]{じょう:article}は[提供]{ていきょう:provision}[元]{もと:source}（[個人]{こじん:personal}データを[持]{も:hold}つ[事業者]{じぎょうしゃ:business operator}）に[本人]{ほんにん:individual}[同意]{どうい:consent}[取得]{しゅとく:acquisition}[義務]{ぎむ:obligation}を[課]{か:impose}す。[法]{ほう:law}31[条]{じょう:article}は[提供]{ていきょう:provision}[元]{もと:source}に「[提供]{ていきょう:provision}[先]{さき:destination}が[同意]{どうい:consent}を[得]{え:obtained}ているか[確認]{かくにん:confirm}する[義務]{ぎむ:obligation}」を[課]{か:impose}す[構造]{こうぞう:structure}。",[393,416,417],"27条","構造的違い"]