Analysis of specific personal information protection assessment in the social security and tax number system of local governments in Japan

Abstract

A law in Japan has been established concerning the My Number system or the use of numbers for identifying specific individuals in administrative procedures in local governments. The law requires local governments to implement the specific personal implementation protection assessment for social security and tax number systems. In this paper, we analyzed the assessment reports of the specific personal information protection assessments conducted by local governments. We did the analysis in two directions: (1) adequacy of risk assessment and measures, and (2) reuse of the assessment report. Our analysis shows that there was a description of assessment on the risk assessment items, but there were many assessment reports with missing assessment on some operations.