[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"news:ppc-guideline-update":3},{"meta":4,"markdown":67},{"type":5,"articleId":6,"slug":7,"title":8,"titleEn":9,"category":10,"summary":11,"publishedAt":12,"image":13,"tags":14,"vocabulary":16},"news","news-ppc-guideline-update","ppc-guideline-update","個人情報保護委員会 — 2024-2025年ガイドライン更新の概要","Personal Information Protection Commission — Overview of 2024-2025 Guideline Updates","jp-politics","An overview of recent updates from the Personal Information Protection Commission (PPC): tighter consent for cross-border transfers, clarifications on pseudonymously processed information, leakage-reporting thresholds, special handling for children's data, and interpretation around AI training data.\n","2026-04-15T00:00:00Z","https:\u002F\u002Fimages.yamiyomi.com\u002Fnews-ppc-guideline-update.png",[15],"regulation",[17,22,26,31,35,39,43,47,51,55,59,63],{"word":18,"reading":19,"meaning":20,"level":21},"委員会","いいんかい","commission","N2",{"word":23,"reading":24,"meaning":25,"level":21},"更新","こうしん","update",{"word":27,"reading":28,"meaning":29,"level":30},"概要","がいよう","overview","N1",{"word":32,"reading":33,"meaning":34,"level":30},"越境","えっきょう","cross-border",{"word":36,"reading":37,"meaning":38,"level":21},"移転","いてん","transfer",{"word":40,"reading":41,"meaning":42,"level":21},"同意","どうい","consent",{"word":44,"reading":45,"meaning":46,"level":30},"仮名加工","かめいかこう","pseudonymous processing",{"word":48,"reading":49,"meaning":50,"level":30},"漏えい","ろうえい","leak",{"word":52,"reading":53,"meaning":54,"level":21},"報告","ほうこく","report",{"word":56,"reading":57,"meaning":58,"level":21},"特別","とくべつ","special",{"word":60,"reading":61,"meaning":62,"level":30},"解釈","かいしゃく","interpretation",{"word":64,"reading":65,"meaning":66,"level":30},"厳格化","げんかくか","tightening","\n::para\n[個人]{こじん:personal:N2}[情報]{じょうほう:information:N3}[保護]{ほご:protection:N1}[委員会]{いいんかい:commission:N2}（PPC）は、[個人]{こじん:personal:N2}[情報]{じょうほう:information:N3}[保護]{ほご:protection:N1}[法]{ほう:law:N3}の[執行]{しっこう:enforcement:N1}を[担当]{たんとう:in charge of:N2}する[第三者]{だいさんしゃ:third-party:N1}[機関]{きかん:agency:N3}です。2024[年]{ねん:year:N5}から2025[年]{ねん:year:N5}にかけて、[ガイドライン]{がいどらいん:guidelines}や[Q&A]{きゅーあんどえー:Q&A}の[更新]{こうしん:updates:N3}が[相次ぎ]{あいつぎ:occurring one after another:N3}、[実務]{じつむ:practical operations:N3}に[一定]{いってい:certain:N3}の[影響]{えいきょう:impact:N1}を[与えて]{あたえて:giving:N3}います。[本記事]{ほんきじ:this article:N3}では[主要]{しゅよう:main:N3}な[更新]{こうしん:update:N3}[項目]{こうもく:items:N1}を[整理]{せいり:organize:N1}します。\n\n#en\nThe Personal Information Protection Commission (PPC) is the third-party agency in charge of enforcement of the Personal Information Protection Act. From 2024 into 2025, updates to guidelines and Q&A have occurred one after another, giving a certain impact on practical operations. This article organizes the main update items.\n::\n\n::heading\n[越境]{えっきょう:cross-border:N2}データ[移転]{いてん:transfer:N2}の[同意]{どうい:consent:N4}[要件]{ようけん:requirements:N3}\n\n#en\nConsent Requirements for Cross-Border Data Transfer\n::\n\n::para\n[個人]{こじん:personal:N2}[情報]{じょうほう:information:N3}を[海外]{かいがい:overseas:N4}の[第三者]{だいさんしゃ:third party:N1}に[提供]{ていきょう:provide:N1}する[際]{さい:when:N3}には、[原則]{げんそく:in principle:N2}として[本人]{ほんにん:person himself\u002Fherself:N5}からの[同意]{どうい:consent:N4}を[取得]{しゅとく:obtain:N3}する[必要]{ひつよう:necessary:N3}があります。[近年]{きんねん:recent years:N4}の[更新]{こうしん:update:N3}では、[同意]{どうい:consent:N4}[取得]{しゅとく:obtaining:N3}にあたって[移転]{いてん:transfer:N2}[先]{さき:destination:N5}の[国]{くに:country:N5}における[個人]{こじん:personal:N2}[情報]{じょうほう:information:N3}[保護]{ほご:protection:N1}[制度]{せいど:system:N3}や、[移転]{いてん:transfer:N2}[先]{さき:destination:N5}が[講じる]{こうじる:taking:N2}[安全]{あんぜん:safety:N3}[管理]{かんり:management:N2}[措置]{そち:measures:N1}に[関する]{かんする:concerning:N3}[情報]{じょうほう:information:N3}を[本人]{ほんにん:person himself\u002Fherself:N5}に[提供]{ていきょう:provide:N1}することが[求められる]{もとめられる:required:N3}など、[厳格化]{げんかくか:tightened:N1}が[進んだ]{すすんだ:advanced:N3}と[されます]{されます:said to be}。\n\n#en\nWhen providing personal information to a third party overseas, in principle it is necessary to obtain consent from the person himself or herself. In recent updates, tightening reportedly advanced — for example, when obtaining consent it is required to provide the person with information concerning the personal information protection system in the country of transfer destination, and concerning the safety management measures taken at the transfer destination.\n::\n\n::heading\n[仮名加工]{かめいかこう:pseudonymously processed:N1}[情報]{じょうほう:information:N3}の[活用]{かつよう:use cases:N3}[整理]{せいり:clarifications:N1}\n\n#en\nClarifications on the Use of Pseudonymously Processed Information\n::\n\n::para\n[仮名加工]{かめいかこう:pseudonymously processed:N1}[情報]{じょうほう:information:N3}は、2020[年]{ねん:year:N5}[改正]{かいせい:amendment:N2}で[導入]{どうにゅう:introduced:N2}された[制度]{せいど:system:N3}で、[他]{た:other:N3}の[情報]{じょうほう:information:N3}と[照合]{しょうごう:cross-reference:N2}しなければ[特定]{とくてい:specific:N3}[個人]{こじん:individual:N2}を[識別]{しきべつ:identify:N3}できないように[加工]{かこう:processed:N3}した[情報]{じょうほう:information:N3}を[指します]{さします:refers to:N3}。[企業]{きぎょう:company:N1}[内部]{ないぶ:internal:N3}での[分析]{ぶんせき:analysis:N1}や[AI]{えーあい:AI}[学習]{がくしゅう:training:N4}に[活用]{かつよう:use:N3}しやすくする[趣旨]{しゅし:intent:N1}ですが、[実務]{じつむ:practical operations:N3}での[適用]{てきよう:application:N3}に[迷い]{まよい:confusion:N3}が[多かった]{おおかった:was much:N4}ことから、PPCは[Q&A]{きゅーあんどえー:Q&A}を[拡充]{かくじゅう:expanded:N1}し、[利用]{りよう:use:N3}できる[範囲]{はんい:scope:N1}や[制約]{せいやく:constraints:N3}を[整理]{せいり:organized:N1}したとされます。\n\n#en\nPseudonymously processed information is a system introduced by the 2020 amendment, and refers to information processed so that a specific individual cannot be identified unless it is cross-referenced with other information. The intent is to make it easier to use such information for internal company analysis and AI training, but because there has been much confusion in its practical application, the PPC reportedly expanded its Q&A and organized the scope of permitted use and the constraints.\n::\n\n::callout\n[注意]{ちゅうい:caution:N4}：[仮名加工]{かめいかこう:pseudonymously processed:N1}[情報]{じょうほう:information:N3}は[第三者]{だいさんしゃ:third party:N1}[提供]{ていきょう:provision:N1}が[原則]{げんそく:in principle:N2}[禁止]{きんし:prohibited:N2}されており、[匿名]{とくめい:anonymously:N1}[加工]{かこう:processed:N3}[情報]{じょうほう:information:N3}とは[制度]{せいど:system:N3}が[異なる]{ことなる:different:N1}[点]{てん:point:N3}に[注意]{ちゅうい:caution:N4}が[必要]{ひつよう:necessary:N3}です。\n\n#en\nCaution: Provision of pseudonymously processed information to third parties is in principle prohibited, and caution is needed regarding the point that the system differs from anonymously processed information.\n::\n\n::heading\n[漏えい]{ろうえい:leak:N1}[等]{とう:etc.:N3}[報告]{ほうこく:reporting:N3}の[基準]{きじゅん:thresholds:N1}\n\n#en\nThresholds for Leakage Etc. Reporting\n::\n\n::para\n2022[年]{ねん:year:N5}[施行]{しこう:enforced:N1}の[改正]{かいせい:amended:N2}[個人]{こじん:personal:N2}[情報]{じょうほう:information:N3}[保護]{ほご:protection:N1}[法]{ほう:law:N3}により、[一定]{いってい:certain:N3}の[条件]{じょうけん:conditions:N1}に[該当]{がいとう:meeting:N1}する[漏えい]{ろうえい:leak:N1}[等]{とう:etc.:N3}の[事案]{じあん:cases:N1}は、PPCへの[報告]{ほうこく:report:N3}と[本人]{ほんにん:person himself\u002Fherself:N5}への[通知]{つうち:notification:N4}が[義務化]{ぎむか:obligated:N1}されました。[要]{よう:required:N3}[配慮]{はいりょ:special-care:N1}[個人]{こじん:personal:N2}[情報]{じょうほう:information:N3}が[含まれる]{ふくまれる:contained:N2}[場合]{ばあい:case:N3}や、[不正]{ふせい:improper:N4}[アクセス]{あくせす:access}が[原因]{げんいん:cause:N3}の[場合]{ばあい:case:N3}は[件数]{けんすう:number of cases:N3}を[問わず]{とわず:regardless of:N4}[報告]{ほうこく:report:N3}[対象]{たいしょう:target:N2}となるなど、[実務]{じつむ:practical:N3}[負担]{ふたん:burden:N2}が[高まって]{たかまって:rising:N5}いるとされ、PPCは[最新]{さいしん:latest:N3}の[Q&A]{きゅーあんどえー:Q&A}で[判断]{はんだん:judgment:N3}[基準]{きじゅん:standards:N1}を[追加]{ついか:adding:N3}[整理]{せいり:organized:N1}しているとされます。\n\n#en\nThrough the amended Personal Information Protection Act enforced in 2022, reporting to the PPC and notifying the person himself or herself became obligated for cases of leakage etc. that meet certain conditions. Practical burden is reportedly rising — for example, cases where special-care personal information is contained, and cases caused by improper access, become reporting targets regardless of the number of cases. The PPC reportedly continues to add and organize judgment standards in its latest Q&A.\n::\n\n::heading\n[子供]{こども:children:N3}の[個人]{こじん:personal:N2}[情報]{じょうほう:information:N3}に[関する]{かんする:concerning:N3}[特別]{とくべつ:special:N4}な[取扱い]{とりあつかい:handling:N1}\n\n#en\nSpecial Handling Concerning Children's Personal Information\n::\n\n::para\n[海外]{かいがい:overseas:N4}の[動向]{どうこう:trends:N3}を[受けて]{うけて:receiving:N3}、[日本]{にほん:Japan:N5}でも[子供]{こども:children:N3}の[個人]{こじん:personal:N2}[情報]{じょうほう:information:N3}を[取扱う]{とりあつかう:handle:N1}[際]{さい:when:N3}の[特別]{とくべつ:special:N4}な[配慮]{はいりょ:consideration:N1}に[関する]{かんする:concerning:N3}[議論]{ぎろん:discussion:N3}が[進んで]{すすんで:advancing:N3}います。PPCは[子供]{こども:children:N3}の[個人]{こじん:personal:N2}[情報]{じょうほう:information:N3}に[関する]{かんする:concerning:N3}[ガイダンス]{がいだんす:guidance}を[公表]{こうひょう:publishing:N3}し、[同意]{どうい:consent:N4}[能力]{のうりょく:capacity:N3}や[親]{おや:parental:N4}[権者]{けんしゃ:guardian:N3}の[関与]{かんよ:involvement:N3}、[年齢]{ねんれい:age:N2}[認証]{にんしょう:verification:N1}の[考え方]{かんがえかた:way of thinking:N4}などを[整理]{せいり:organized:N1}したと[伝えられて]{つたえられて:reported:N3}います。\n\n#en\nReflecting overseas trends, discussion concerning special considerations when handling children's personal information is also advancing in Japan. The PPC reportedly published guidance concerning children's personal information and organized topics such as the concept of consent capacity, parental guardian involvement, and approaches to age verification.\n::\n\n::heading\nAI[学習]{がくしゅう:training:N4}データへの[解釈]{かいしゃく:interpretation:N1}\n\n#en\nInterpretation Toward AI Training Data\n::\n\n::para\n[生成]{せいせい:generative:N3}AIの[学習]{がくしゅう:training:N4}データに[個人]{こじん:personal:N2}[情報]{じょうほう:information:N3}が[含まれる]{ふくまれる:contained:N2}[場合]{ばあい:case:N3}の[扱い]{あつかい:treatment:N1}は、PPCが[特に]{とくに:especially:N4}[力]{ちから:effort:N4}を[入れて]{いれて:putting in:N5}いる[論点]{ろんてん:point of discussion:N3}です。[学習]{がくしゅう:training:N4}データを[第三者]{だいさんしゃ:third party:N1}から[購入]{こうにゅう:purchase:N1}する[場合]{ばあい:case:N3}の[利用]{りよう:use:N3}[目的]{もくてき:purpose:N4}の[特定]{とくてい:specifying:N3}や、[Webクローリング]{うぇぶくろーりんぐ:web crawling}で[収集]{しゅうしゅう:collected:N3}されたデータの[扱い]{あつかい:treatment:N1}など、[解釈]{かいしゃく:interpretation:N1}が[難しい]{むずかしい:difficult:N3}[論点]{ろんてん:points:N3}が[多く]{おおく:many:N4}、[今後]{こんご:going forward:N5}も[継続的]{けいぞくてき:continuously:N1}な[ガイダンス]{がいだんす:guidance}[更新]{こうしん:updates:N3}が[期待]{きたい:expected:N3}されています。\n\n#en\nThe treatment of cases where personal information is contained in generative AI training data is a point of discussion that the PPC is especially putting effort into. There are many difficult interpretation points — such as the specifying of use purposes when training data is purchased from third parties, and the treatment of data collected by web crawling — and continuous guidance updates are expected going forward.\n::\n"]