研究発表

While the privacy world watches the countdown to the GDPR, important changes are afoot outside the European Union. Some countries are tracking the EU model closely, in a bid to maintain or gain adequacy in the eyes of the European Commission. Other countries are charting a different course, driven by trade deals and national priorities that fall outside the confines of EU data protection law. What’s clear above all is that privacy law is in flux the world over. The GDPR aims to set the global standard, but will other countries follow suit? How are adequate (and adequacy-seeking) countries reconciling harmonization with local preferences and norms? And what important priorities are lost as the GDPR steals the limelight? Hear from the regulators of significant EU trading partners and learn about the critical changes taking place outside the EU.

JST社会技術研究開発センター（RISTEX）

「ビッグ・データ」という用語が用いられる機会が増えている。一方で，ＥＵ個人データ保護規則案では、「忘れられる権利」という実効性の担保が不明な規定が設けられようとしている。非構造化データの野放図な活用と、権利のインフレ化に惑わされることがないよう、近時の国内外の動向及び議論の現状を把握し法的課題を確認した。

This presentation focuses on the trends related to the development of the internet environment for young people in Japan. From the point of view of the current legal framework, 'the Law on the Development of an Environment which Provides Safe and Secure Internet Use for Young People' has been enacted for protecting them against illegal or harmful information. I will describe the current state of the internet use environment for young people, the outline of the recommendation regarding the development of an environment which provides safe and secure internet use for them, and the background to, and a summary of, the draft OECD recommendation for the protection of children online.

「社会保障・税番号大綱」により「番号制度（マイナンバー）」の導入が決定した。所得情報の把握と公平な社会保障給付の実現のために、国民を確実に識別することを目的として用いられる共通番号は、国家による国民の管理、個人情報の追跡・突合、財産その他の被害等の問題が指摘されている。番号制度の導入と人権保障における課題について、第三者機関（三条委員会）の設置へ向けた提言、情報保護評価（ＰＩＡ）の実施へ向けた方針について報告した。

クラウド・コンピューティングの活用にあたって適用される国内外の法令・規格等を概観し、越境データ流通に伴う問題を、日本、米国、EU、APECの各制度間における法的枠組み相互の観点から検討した。

This report focuses on the current development of the Data Protection in Japan. １ Personal Data Protection Systems and Maintenance Processes in Japan ２ History of Personal Data Protection Systems in Japan ３ Laws Relating to Personal Data Protection, History of Establishment of Laws Relating to Personal Data Protection (Japan) ４ Act on the Protection of Personal Information ５ Overall Outline of Personal Data Protection Laws in Japan ６ Ministerial Guideline Policy Decisions / Basis of Revisions ７ Areas for Establishing Ministerial Guidelines Relating to Personal Data Protection Laws ８ Recent Topic: Basic Principles for handling Life-Log, and the Comprehensive 'smart' ID plan.

社会保障・税番号の導入に向けた検討において、共通番号制度導入に伴うプライバシーの権利保障のあり方について報告した。

A life-log is a comprehensive archive of personal, everyday life which is collected by computing technologies. This information is used for business purposes such as online behavioural advertising. However, the meaning of the term 'life-log' is vague. Moreover, the distinction between Personally Identifiable Information (PII) and Non-Personally Identifiable Information (non-PII) is not clear. The traditional notion of what constitutes PII or non-PII is becoming less and less clear. Therefore, I will try to detail and explain the current, complete range of legal accountability issues related to the collection of data for constructing a 'life-log'. I will examine the following issues: concerns about the technical and legal issues of using 'life-logs'; obligations related to the Personal Information Protection Act; principles concluded by the May 2010 Study of The Committee of the Ministry of Internal Affairs and Communications of Japan; `The 2007 Self-Regulatory Principles for Online Behavioural Advertising` created by the Federal Trade Commission and industry groups in the United States. I will make reference to a number of legally important cases concerning the unfortunate and rather embarrassing, public disclosure of personal details of specific individuals and of the ensuing publicity which created the wrong impression of these individuals in the public imagination. Finally, I will examine the concept of legal accountability when handling 'life-logs'.

ネットワーク社会における青少年保護の問題について、青少年インターネット環境整備法をはじめとする現行法令を総覧し、非実在青少年も対象にした東京都青少年の健全な育成に関する条例の改正案における問題について報告した。

1980年に制定されたOECDプライバシーガイドラインの改正動向と最新情報について、ガイドライン見直しの論点を中心に解説を行った。

I gave a presentation with respect to the Meaning and interpretation of privacy principles - Access and correction principles -. This report was the part of one day course which provided a complete and up-to-date survey of information privacy (data protection) law and regulation developments across the Asia-Pacific region.