FAQ: What does private sector do?

Last Updated:: Mar 25, 2026

Q & A will be added as needed.
At the end of each answer, it is written as (answer in X, 20 xx). There is one before August 2021, but this was answered on the Digital Agency website before Cabinet Office was established.

4-1 Introduction

Q4-1-1 Does private sector also handle My Numbers (Individual Numbers)?

A4-1-1

In private sector, it is also necessary to obtain the My Number of employees and their dependents, enter it in the withholding record of employment income or the notice of eligibility for social insurance, and submit it to the administrative agency.

In addition, My Number must be stated on payment records prepared by securities companies and insurance companies, payment records of manuscript fees, etc.
(Updated June 2014)

Q4-1-2 Where can I check the forms (records and notification documents) that need to contain my My Number?

A4-1-2

Details are provided in the relevant ministerial ordinances pertaining to the administration of social security, national taxes, local taxes, disaster prevention, etc. Forms related to national taxes and local taxes are published on the websites of National Tax Agency and Ministry of Internal Affairs and Communications, and forms for notifications related to social security are published on the website of Ministry of Health, Labor and Welfare.
(Updated June 2023)

Q4-1-3 Can I manage the information of my employees and customers using my My Number?

A4-1-3

My Number cannot be used outside of the administrative procedures stipulated by laws and regulations or ordinance, such as social security system, tax system, and disaster response. In addition, except in cases where it is necessary for these procedures, private sector cannot request employees or customers to provide their My Number, nor can it provide, collect, or store specific personal information (personal information that includes the My Number (see Q5-6)).

My Number Card (Individual Number Card) can be used as identification for identity verification of customers for procedures other than those stipulated by laws and regulations and ordinance. However, in such cases, the My Number printed on the back of the My Number Card cannot be copied or copied.

When presenting a My Number Card as an identification card, it is not a violation of the provisions of the My Number Act, such as restrictions on provision, if the My Number on the back of the My Number Card is seen unintentionally or the My Number written on the back of the My Number is seen unintentionally.
(Updated June 2023)

Q4-1-4 Can I entrust or re-entrust work handling My Number?

A4-1-4

It is possible to outsource all or part of the work handling My Number. In addition, the contractor may re-outsource all or part of the work only if it obtains the permission of the original contractor.

In addition, in the case of outsourcing or re-outsourcing, necessary and appropriate supervision must be conducted on the party that has undertaken the outsourcing or re-outsourcing to ensure the safe management of Personal Information. The party that has undertaken the outsourcing or re-outsourcing has the same obligation to appropriately handle My Number as the outsourcer.
(Updated June 2023)

Q4-1-5 Do even small-scale businesses have to handle My Numbers and take measures to protect specific personal information?

A4-1-5

Small businesses will also be handling My Numbers for their employees and others in accordance with social security, tax, and other procedures stipulated by laws and regulations, so it is necessary to take measures to protect personal data such as those mentioned in Q4-4-1. My Number Law (e-Gov) in 's obligations apply to all businesses regardless of size.
(Updated November 2017)

4-2 Obtaining a My Number

Q4-2-1 By when do I need to obtain the My Number of my employees, etc.?

A4-2-1

Please obtain it by the time you submit a legal record with your My Number to an administrative institution.
(Updated June 2023)

Q4-2-2 What kind of procedures are necessary when obtaining My Number from employees or financial institution customers?

A4-2-2

When obtaining My Number written in writing (including electromagnetic records) directly from the person, please clearly indicate the purpose of use to the person and make a strict identity verification to prevent impersonation. See Q4-2-3 for clear indication of the purpose of use and "4-3 identity verification" for identity verification.
(Updated June 2023)

Q4-2-3 When obtaining My Number for employees, etc., do I have to clearly indicate the purpose of use? Also, where is it stipulated in the My Number Act?

A4-2-3

As stated in Q5-7, unless there are special provisions in the My Number Law (e-Gov) in , the Personal Information Protection Act also applies to Specific Personal Information (Personal Information that contains My Number (see Q5-6)). Therefore, when obtaining My Number recorded in writing (including electromagnetic records) directly from the Principal, the Purpose of Use must be clearly indicated to the Principal in accordance with Article 21, Paragraph 2 of the Act.

However, it is possible to indicate multiple purposes of use together.
(Updated June 2023)

Q4-2-4 What method is appropriate for notification, etc. of the purpose of use of My Number?

A4-2-4

Methods for notifying the purpose of use of My Number include not only the presentation of documents but also notification via internal LAN. In accordance with Article 21 of the Personal Information Protection Act and guidelines for the Act, it is possible to use the same methods as those used in the past when obtaining personal information.
(Updated June 2023)

Q4-2-5 Is it possible to use Specific Personal Information obtained for one Individual Number related clerical work for another Individual Number related clerical work?

A4-2-5

The use of the My Number for clerical work that was not specified as the purpose of use at the time of receiving the My Number is the use of the My Number beyond the purpose of use specified in advance. To use the My Number for such clerical work, it is necessary to specify the purpose of use and receive the My Number from the person again, or change the purpose of use and notify or announce the changed purpose of use to the person.

In cases where it is possible to change the Purpose of Utilization, Article 17, Paragraph 2 of the Personal Information Protection Act provides that "when an entity handling personal information changes the Purpose of Utilization, it shall not do so beyond the scope which is reasonably considered to be relevant to the Purpose of Utilization before the change."

In addition, as noted in Q4-2-3, when obtaining My Numbers from employees, it is acceptable to obtain and use them after comprehensively clarifying the administrative work and purpose of use for which My Numbers will be used, such as withholding tax and health insurance procedures.
(Updated June 2023)

Q4-2-6 Businesses need to obtain My Numbers from their employees, etc. in order to include them in documents related to taxes, social security, etc. What should I do if employees, etc. refuse to provide their My Numbers?

A4-2-6

Please inform people that it is a duty stipulated by social security system or tax system to write your My Number on the documents specified by laws and regulations, ordinance, etc., and ask them to provide it. If you still cannot receive it, please follow the instructions of the organization to which you submit the documents.
(Updated June 2023)

Q4-2-7 At our company, where workplaces are widely dispersed and employees work in units of several to several hundred in each workplace, ordinary administrative work is performed at (1) administrative centers concentrated in each region (several to several tens of administrative staff are assigned) and (2) administrative departments of each workplace (several administrative staff are assigned). In this case, regarding the acquisition of My Number, is it okay to designate the administrative centers and administrative departments in (1) and (2) as "administrative staff" and have them implement it?

A4-2-7

As an in-house rule, there will be no problem as long as you clarify who is in charge of handling clerical work, who is responsible for it, and who checked it. Please prepare a system that allows the company to check it when necessary.
(Answer in September 2015)

Q4-2-8 Regarding the scope of submission of payment records for real estate usage fees, etc., the total amount paid to the same person for the year exceeds a certain amount specified by the Income Tax Act. If it does not exceed the certain amount, is it possible to request the provision of My Number?

A4-2-8

Therefore, if it is clear at the time of concluding a contract that the total amount of rent for the year will not exceed a certain amount set forth in the Income Tax Act due to the contents of the contract, it is not necessary to submit a payment record. Therefore, it is not possible to request the provision of My Number at the time of concluding the contract.

On the other hand, if the payment record is not required for the year because the contract is concluded in the middle of the year, but is required for the following year, the submission of the My Number may be requested for the preparation and submission of the payment record for the following year.
(Answer in September 2015)

Q4-2-9 If the amount of payment is not fixed at the time of conclusion of the contract and the necessity of submission of payment records is not clear, can I request the provision of My Number at the time of conclusion of the contract?

A4-2-9

In cases where clerical work related to Individual Numbers is expected to occur based on the legal relationship with the customer, etc., it is understood that the provision of My Number can be received at the time of conclusion of the contract. After that, if it becomes clear that clerical work related to Individual Numbers will not occur, it is necessary to dispose of or delete the My Number as soon as possible.
(Answer in September 2015)

Q4-2-10 When opening a so-called "general account (securities account / investment trust account)" instead of a specific account in order to conduct stock or investment trust transactions, is it possible to request the provision of My Number at the time of opening the account?

A4-2-10

Securities accounts and investment trust accounts are opened for stock and investment trust transactions, and at the time of opening such accounts, it is expected that Individual Number related affairs will occur in the future based on stock and investment trust transactions. Therefore, it is understood that it is possible to request the provision of My Number for so-called "general accounts" at the time of opening the account.
(Answer in September 2015)

Q4-2-11 Is it possible for a temporary staffing agency to request the provision of the registrant's My Number at the time of temporary staffing registration?

A4-2-11

In principle, it is not possible to request the submission of a registrant's My Number simply by registering with a temporary staffing agency, as it is not yet determined whether the employee will be hired and it is not expected that Individual Number related administrative work will occur, and it cannot be said that it is necessary to process Individual Number related administrative work such as salary withholding.

However, if the opportunity to request the provision of My Number after making a identity verification is only at the time of registration, and it is deemed highly probable that an employment contract will be established in the near future, such as by deciding the conditions for salary payment at the time of actual employment, it is understood that the provision of My Number can be requested in the same manner as the case where an employment contract is established.
(Answer in September 2015)

4-3 identity verification

Q4-3-1 How should identity verification be made when obtaining My Number for employees, etc.? Also, how should identity verification be made when obtaining My Number by methods other than face-to-face (by mail, online, or by phone)?

A4-3-1

When obtaining an My Number, it is necessary to confirm that the number is correct (number confirmation) and that the person who is actually performing the procedure is the correct owner of the number (identity confirmation).

My Number Card (number and identity verification)
Electromagnetic Records in Place of Cards (Number Confirmation and Identity Confirmation)
A copy of your certificate of residence containing your My Number (number confirmation) and your driver's license (identification)

However, if these methods are difficult, it is acceptable to confirm the number using a file created by making a identity verification in the past. In addition, if the Person in Charge of Affairs Using the Individual Number deems that it is clearly possible to determine that the person is the same person due to the fact that they are in an employment relationship, etc., it is also acceptable to dispense with identity confirmation.

Confirmation of the number and identity is also required when obtaining an My Number not only in person but also by mail, online, or over the phone. For details, please refer to the measures of identity verification, identity verification's Measures (PDF / 258 kb) (updated on July 4, 2025).

When receiving a copy of the My Number Card when obtaining your My Number, since the front side contains highly personal information such as the indication of intention to donate organs, a copy may be made as it is in the card case provided when the My Number Card is issued. However, please note that the back side must be a copy with your My Number indicated.

(Updated July 2025)

Q4-3-2 When I confirm my identity because I am in an employment relationship, is there any problem if my resume is the only document that I need to confirm at the time of employment?

A4-3-2

The identity verification at the time of employment is not sufficient with only a curriculum vitae. At the time of employment, it is necessary to confirm with the documents specified by the My Number Law (e-Gov) in or tax law, or documents of the same level of identity verification as specified by National Tax Agency public notice (driver license, student ID card with photo, etc.).
(Answer in September 2015)

Q4-3-3 Do I need to receive a copy of my identity verification documents when obtaining my My Number?

A4-3-3

In order to make a identity verification when obtaining a My Number in person, it is necessary in principle to have the identity verification documents "presented." Therefore, it is not necessary to request a copy of the identity verification documents from the payee of the lecture fee.

In order to make a identity verification when obtaining a My Number by mail, a copy of the identity verification document must be sent by mail.

In addition, in order to make a identity verification when obtaining an My Number online, it is possible to send a copy of the identity verification document by email or use a Public Personal Authentication.

For details, please refer to identity verification's Measures (PDF / 258 kb) (updated on July 4, 2025).
(Updated July 2025)

Q4-3-4 How do I make a identity verification when I receive my My Number from a proxy?

A4-3-4

When receiving a My Number from a proxy, it is necessary to confirm three things: (1) the right of proxy, (2) the identity of the proxy, and (3) the number of the principal. In principle

For confirmation of the authority of representation, a copy of the family register in the case of a legal representative or a letter of attorney in the case of an authorized representative
Verification of the identity of the agent may include verification of the agent's My Number Card, driver's licence, etc.
To confirm the number of the person, the person's My Number Card, a copy of the certificate of residence with the My Number, notification card (*), etc.
, but if these methods are difficult, other methods are also accepted. For details, please refer to identity verification's Measures (PDF / 258 kb) (updated on July 4, 2025).

* The "Notification Card" was abolished on May 25, 2020. However, the Notification Card can still be used as a number confirmation document as long as the name, address, and other details on the Notification Card match the details listed on the resident record.
(Updated March 2026)

Q4-3-5 Do I have to make a identity verification for a retired pensioner?

A4-3-5

Even if you are a retired pensioner, you must make a identity verification if you receive your My Number from yourself or your agent.

It is possible to receive your My Number by mail, online, or by phone, but you will also need to make a identity verification according to the procedure (see Q4-3-1 and Q4-3-4).

It is also possible to entrust administrative work for identity verification (see Q4-3-7).
(Updated July 2014)

Q4-3-6 Does identity verification have to be done every time a My Number is provided?

A4-3-6

Each time you receive an My Number, you need to make a identity verification. For example, if you have employees submit an application for an exemption for dependents, etc. with their My Numbers listed every year, you also need to make a identity verification every time. However, if it is difficult to receive a My Number Card, a copy of the certificate of residence with your My Number, or a notification card (*), etc., you can confirm your number the second time or later by checking it against the record of your My Number obtained when you make a identity verification for the first time.

In addition, with regard to identity confirmation, if the person in charge of administrative affairs using the Individual Number finds that it is clearly possible to determine that the person is the person because of the employment relationship, etc., it is not necessary to present documents for identity confirmation.

Q4-3-7 Can I obtain a My Number and entrust the administrative work of making a identity verification?

A4-3-7

It is possible to entrust it, but it is necessary to conduct necessary and appropriate supervision of the trustee based on Article 11 of the My Number Law (e-Gov) in . When the trustee obtains the My Number from the Principal, it is necessary to clearly indicate the purpose of use, such as what kind of clerical work the trustee will use.
(Updated June 2023)

Q4-3-8 When obtaining My Numbers for dependents of employees, does the business operator also have to make a identity verification for the dependents?

A4-3-8

Identity verification for dependents varies depending on who is obliged to provide the My Number of dependents under each scheme. For example, in the year-end tax adjustment, employees are supposed to provide their employers with their dependents' My Numbers. Therefore, employees are required to make identity verification for their dependents as a Person in Charge of Individual Number Related Affairs. In this case, employers are not required to make identity verification for their dependents.

On the other hand, when reporting as a Category 3 insured person under the National Pension Plan, the spouses of employees (Category 3 Insured Persons) themselves must report to the employer, so the employer must make a identity verification for such spouses. It is normally assumed that employees will report to the employer on behalf of their spouses, but in that case, the employees will provide their My Numbers on behalf of their spouses, so the employer must make a identity verification when receiving My Numbers from an agent.

It is also possible for business operators to outsource to employees the administrative work of receiving My Numbers from spouses and making identity verification.
(Answer in July 2014)

Q4-3-9 Is it possible to copy the identity verification documents (My Number Card, notification card, identification documents, etc.) presented at the time of implementing identity verification measures under the My Number Act and keep them at the business office?

A4-3-9

When you obtain your My Number, you may receive a copy of the identity verification documents. You may keep a copy to keep a record of your identity verification, but you must take appropriate security control measures. However, please dispose of the identity verification documents as soon as they are no longer necessary after completing the necessary procedures.
(Updated June 2023)

Q4-3-10 If there is an error in the My Number collected and provided, is the responsibility of the business operator who is the Person in Charge of Individual Number Related Affairs?

A4-3-10

There are no penalties for errors in the My Number. However, under Article 16 of the My Number Law (e-Gov) in
(Updated June 2023)

Q4-3-11 In case that lecture fees have been paid to lecturers and such fees are to be used for the purpose of preparing payment records for remunerations, fees, contract money, and prize money on an ongoing basis in the following year and thereafter, is it necessary to make a identity verification?

A4-3-11

My Number that was provided in the previous year for the purpose of preparing a payment report for the fees, charges, contract money, and prize money associated with the payment of lecture fees may be used continuously in the following year and thereafter for the purpose of preparing a payment report for the fees, charges, contract money, and prize money associated with the payment of lecture fees. Therefore, it is not necessary to make a identity verification again.

However, if you need to receive your My Number again due to a change in your number, you will need to confirm your number and identity.
(Answer in September 2015)

4-4 Use and Safety Management

Q4-4-1 Is there anything I should be aware of when private sector handles My Number?

A4-4-1

You cannot use your My Number beyond the scope of use stipulated by laws and regulations and ordinance, nor can you needlessly request the provision of your My Number, provide Specific Personal Information (Personal Information that includes your My Number (see Q5-6)), or collect or store it. In addition, when handling your My Number, you must take the necessary measures to properly manage your My Number, such as preventing its leakage, loss, or damage. For specific measures, Personal Information Protection Commission has indicated the Guidelines (Personal Information Protection Commission website) , so please refer to it.

If you handle Specific Personal Data inappropriately, you may receive guidance, advice, recommendations, or orders from Personal Information Protection Commission. In addition, if you provide a Specific Personal Data File (Personal Data File containing My Number (see Q5-6)) that records confidential information of individuals handled in the course of work without justifiable grounds, you will be subject to punishment (see Q5-10).
(Updated June 2023)

Q4-4-2 Is private sector also required to conduct Specific Personal Data Protection Assessment?

A4-4-2

Specific personal information protection assessment means that a person who intends to hold a specific personal information file (see Q5-6) evaluates the risk and impact of leakage of specific personal information.

(1) Administrative Organs, (2) Local Governments, (3) Incorporated Administrative Agencies, etc., (4) Local Incorporated Administrative Agencies, (5) Japan Agency for Local Authority Information Systems, and (6) Business operators engaged in information coordination (excluding those listed in (1) through (5) and listed in the Ordinance of the Competent Ministry for the Provision of Specific Personal Information for the Use of (e-Gov) (*) , such as health insurance associations).
*Order on Provision of Use-Specific Personal Information Based on Article 19, Item 8 of the Act on the Use of Numbers to Identify a Specific Individual in Administrative Procedures

For this reason, it is not necessary for private sector to conduct Specific Personal Information Protection Assessment, except for health insurance associations, etc. that conduct information collaboration. However, this does not preclude Nagoya University from conducting Specific Personal Information Protection Assessment at its discretion. For details of Specific Personal Information Protection Assessment, please check the Personal Information Protection Commission website .
(Updated June 2014)

Q4-4-3 Instead of managing the My Numbers of employees and their dependents for each administrative task such as tax and social security, is it acceptable to newly build a system for managing and collecting the My Numbers and perform administrative tasks by linking that system with the existing system?

A4-4-3

As stated in Q4-2-3, when obtaining My Numbers from employees, it is necessary to clearly indicate the purpose of use, and it is necessary to take measures such as controlling the linkage with existing systems so that My Numbers cannot be used beyond that scope.
(Updated June 2014)

Q4-4-4 Is it acceptable for "clarification of persons in charge of handling clerical affairs" not to be based on individual names, such as clarification based on roles, affiliations, etc.?

A4-4-4

It is considered sufficient if the person in charge is clarified by the name of the department (○ ○ Division, ○ ○ Section, etc.), the name of the clerical person (○ ○ person in charge of clerical affairs), etc. However, if the scope of the person in charge of clerical affairs cannot be clarified by the name of the department, etc., it is considered necessary to appoint a person in charge of clerical affairs, etc.
(Answer in September 2015)

Q4-4-5 Instead of creating new handling rules, etc. for the protection of Specific Personal Information, is it acceptable to review the existing handling rules, etc. for the protection of Specific Personal Information and add descriptions on the handling of Specific Personal Information?

A4-4-5

If there are existing handling regulations, etc. related to the protection of Personal Information, it may be possible to add the handling of Specific Personal Information.
(Answer in September 2015)

Q4-4-6 Even if a customer's My Number is legally stored, is it necessary to request the provision of a new My Number every time a new contract is concluded?

A4-4-6

If the My Number that is legally stored is within the scope of the originally specified purpose of use, it can be used for Individual Number related affairs that will occur based on the new contract without receiving a new My Number.
(Answer in September 2015)

Q4-4-7 Businesses will obtain My Numbers from employees and use them for administrative affairs such as tax and social security. Is it necessary to stipulate the handling of this in work rules?

A4-4-7

A business operator must receive My Number from employees after clearly indicating the purpose of use in order to complete the procedures required by laws and regulations or tax system or social security system stipulated by ordinance. As a method for doing so, in addition to providing notification via the internal LAN and presenting documents stating the purpose of use, it is also possible to clearly state the purpose of use in the work rules, as has been done in the past when obtaining personal information.

Please note that stipulating the handling of the My Number in the work rules is only one method, and it is not mandatory to stipulate it in the work rules as a well-known method. However, each business operator is requested to determine which specific method to adopt.

In addition, regarding the relationship between the My Number and labor-related laws and regulations, please check the document "We request the cooperation of business owners and employees regarding the entry of My Number (Individual Number) on social security and tax procedure documents" (Ministry of Health, Labor and Welfare's website) prepared by Ministry of Health, Labor and Welfare.
(Updated June 2023)

4-5 Provision of My Number

Q4-5-1 When an employee is seconded or transferred to a subsidiary, etc., is there a problem with providing the employee's specific personal information (Personal Information including My Number) to the transferee?

A4-5-1

My Number Law (e-Gov) in , if an employee has been seconded or transferred, and with the consent of the employee, the Company may provide the employee's Specific Personal Data from the Company from which the employee was seconded or transferred to the Company to which the employee was seconded or transferred, to the extent necessary to process the Individual Number-related affairs.

The business operator before the secondment or transfer is required to obtain consent from the employee after disclosing the specific destination of the provision of Specific Personal Information after the decision on the secondment or transfer of the employee.
(Updated June 2023)

Q4-5-2 In the event of a business succession due to a merger, etc., can I provide my My Number to the business successor?

A4-5-2

Business succession due to a merger, etc. falls under Article 19, Item 6 of the My Number Law (e-Gov) in My Number Act (Personal Identification Number)
(Updated June 2023)

Q4-5-3 Is it possible for a business operator to provide the My Number of an employee or his / her dependents obtained by the business operator to the health insurance society to which the employee belongs?

A4-5-3

If an employer is required to provide the My Number of employees and their dependents to a health insurance society under the provisions of laws and regulations such as the Health Insurance Act, the employer can provide the My Number to the health insurance society because the employer is a person who performs clerical work related to Individual Numbers for the health insurance society, which is a person who performs clerical work using Individual Numbers.

When a business operator obtains an Individual Number from an employee, the business operator must clearly indicate that it will use the Individual Number in administrative affairs related to health insurance.
(Updated June 2023)

Q4-5-4 How should we handle the separation of the company?

A4-5-4

In the case of a spin-off, there is no need to re-acquire Specific Personal Data, and it is possible to provide Specific Personal Data that has already been acquired to the extent necessary. Article 19, Item 6 of the My Number Law (e-Gov) in stipulates that the restriction on provision will be lifted "when Specific Personal Data is provided in connection with the entrustment of all or part of the handling of Specific Personal Data or the succession of businesses due to mergers or other reasons," and this includes the case of a spin-off.
(Updated June 2023)

Q4-5-5 While efforts are being made to improve efficiency by managing personnel information and conducting business operations on a Group-wide basis, it is inefficient to manage the My Number individually at the individual company level within the Group. Please tell us the basis for using the My Number on a Group-wide basis.

A4-5-5

My Number Law (e-Gov) in , moving beyond a certain organization or person, such as from person to corporation or from corporation to corporation, is classified as "provision to third parties." Under the Personal Information Protection Act, shared use is permitted, but under the My Number Act, shared use based on Article 27, Paragraph 5, Item 3 of the Personal Information Protection Act is not permitted. Even if it is a company within the group, if it is a different company, it falls under provision to third parties, so it is not possible to provide it unless it is permitted under Article 19 of the My Number Act. However, it is possible to entrust the handling of the My Number. For example, it is possible to entrust the head office of the group, the head office performs identity verification, and the head office provides it based on Article 19, Item 6 of the My Number Act.
(Updated June 2023)

Q4-5-6 Is it possible to use a certificate of income and withholding tax containing an My Number for a loan related to the acquisition of a house (housing loan)?

A4-5-6

Article 93 of the Ordinance for Enforcement of the Income Tax Act was amended on October 2, 2015, and a withholding record for employment income to be issued to the individual shall be issued without the My Number of the individual and his / her dependents.

When using a withholding exemption certificate containing the My Number based on the disclosure request under Article 33 of the Personal Information Protection Act for loans related to housing acquisition (housing loans), etc., it is necessary to take measures such as masking the My Number part so that it cannot be restored.
(Updated June 2023)

Q4-5-7 If I do not enter my My Number, is it possible to send a copy of the payment record to the person?

A4-5-7

If measures are taken to prevent all My Numbers, including the Person's My Number, from being entered or to mask them to the extent that they cannot be restored, the My Number Law (e-Gov) in . Therefore, it is possible to send a copy of payment records, etc. to the Person without a request for disclosure based on Article 33 of the Personal Information Protection Act.
(Updated June 2023)

4-6 Disposal of My Number

Q4-6-1 Please tell me when to dispose of an employee's My Number.

A4-6-1

When it is no longer necessary to process Individual Number related affairs and the retention period specified by the competent laws and regulations has passed, the My Number must be disposed of or deleted as soon as possible.

As for the period from the time when disposal becomes necessary until the disposal work is performed, please consider the safety and administrative efficiency related to the retention of My Number and Specific Personal Information, such as disposing at the end of each fiscal year, and judge by the business operator.
(Answer in September 2015)

Q4-6-2 To what extent is the period allowed from the time when My Number needs to be disposed of until the disposal work is carried out?

A4-6-2

Regarding the period from the time when disposal becomes necessary until the disposal work is performed, please consider the safety and administrative efficiency related to the retention of My Number and Specific Personal Information, such as disposing at the end of each fiscal year, and make a decision by the business operator.
(Answer in September 2015)

Q4-6-3 In order to avoid the time-limit management of the retention period of My Number, is it possible to delete My Number at the time of termination of the contractual relationship?

A4-6-3

Information that is required to be retained for a certain period of time by the relevant laws and regulations may not be deleted upon termination of the contractual relationship.
(Answer in September 2015)

4-7 Penalties

Q4-7-1 Will penalties be applied even if My Number or specific personal information has been leaked unintentionally (e.g., information has been leaked due to an cyberattacks, etc.)?

A4-7-1

Penalties will not be applied immediately in the case of accidental leakage of My Number or Specific Personal Data. However, depending on the nature of the leakage, you may receive guidance, advice, recommendations, or orders from Personal Information Protection Commission, and penalties may be applied if you violate the order. The above is a case of criminal punishment, but in the case of civil punishment, even negligence may result in a claim for damages.
(Updated June 2023)

Reference

Interpretation and application of laws and regulations of the Penal Code are the authority of courts and investigative agencies, so in general terms, if a leak of specific personal information occurs and it falls under the constituent requirements prescribed in Article 48 to Article 57 of the My Number Law (e-Gov) in , there is a possibility of punishment, but these penalties do not meet the constituent requirements if they are not intentional.