Home > About the System > Reporting Accidents, etc.
Reporting Accidents
April 9, 2007
Based on reports on personal information accidents from private enterprise accredited PrivacyMark; the Mark Sysmte Committee would udge in accordance with Evaluation Criteria for PrivacyMark Disqualification
and determine what measures to be taken.
After revision of the Rules for the Establishment and Operation of the PrivacyMark System
(on March 23, 2007), accredited private enterprises are obliged to report its accident to JIPDEC (No. 20, Article 4). The reports are to be identified definitely in accordance with Evaluation Criteria for PrivacyMark Disqualification
.
In line with the revision of METI's Guidelines for Personal Information Protection Laws Concerning Fields of Economy and Industry
on April 1, 2007, Authorized Personal Information Protection Organizations are to receive accident reports from their members in charge of the minister. as Accredited Personal Information Protection Groups, in place of the Cabinet minister in charge, receive accident reports from the subject providers. Because of this revision, our accident report forms are also revised.
In case of leakages of personal data, including sensitive personal information, credit information and credit card data causing, serious secondary damage, members must report the accidents to the minister directly.
Reporting procedures are as follows:
Private Enterprises Subject to Reporting
The following private enterprises are subject to reporting:
- PrivacyMark accredited private enterprises;
- Applicant of PrivacyMark;
- Potential applicant of PrivacyMark;
Private enterprises that have received accreditation from a Conforminity Assessment Bodies, or on-going and/or potential applicants, should follow the instructions of their Conforminity Assessment Body.
Report Contents
Fill out the attached report form (Form 1(PDF:19KB)) Check or fill out each item, without omissions.
Attach the correct cover sheet before sending the report. (Accredited private enterprises: Form 2(PDF:11.8KB), in the process of application: Form 3(PDF:11.1KB), potential applicants: Form 4(PDF:11.3KB))
Report Destination
After affixing the representative's seal, send the form by registered mail or courier service.
| Address | Kikai-Shinko-Kaikan 3-5-8 Shiba-koen, Minato-ku, Tokyo 105-0011 |
|---|---|
| Addressee | Japan Information Processing Development Corporation (JIPDEC) PrivacyMark Office |
Private enterprises that have received accreditation from a Conforminity Assessment Bodies, or on-going applicants, should report to their Conforminity Assessment Bodies.
Handling of Management
The report forms are to be utilized by the PrivacyMark Office for judgment of disqualification. Copies of the reports are possibly to be referred to Mark System Committee if necessary. Afetr the Committee, they are collected and shredded for disposal entirely. Also, the reports from members of Authorized Personal Information Protection Organizations are used for reporting to METI.
The main report (the original copies) will be stored at the PrivacyMark Office.
