IPA IP 2022 Question 23

A question IPA Japan published in 令和4年度 ITパスポート試験 公開問題 問23, translated into English. ITPEC is based on the same exams.

Which of the following is the most appropriate description concerning opt-out?

Explanation

A resident whose name appears on a residential map has the listing stopped — opt-out means personal information is used or provided until the person asks for it to stop.

Under Japan's Act on the Protection of Personal Information a business may, as an exception, provide personal data to third parties without prior consent if it has notified the Personal Information Protection Commission and lets each person stop the provision on request: this is the opt-out method. Residential maps, which print residents' names at their homes and are sold to anyone, are the classic example. The resident who finds his or her name and asks the map maker to remove it is exercising exactly that right to opt out.

Answer (b)

Why not others:

  • •(a) — sending mail only to users who asked for notifications is opt-in: nothing is sent until the person agrees
  • •(c) — abandoning a purchase midway is just cart abandonment, a consumer's choice, not a refusal of the use of personal data
  • •(d) — replacing names and addresses with random values so customers cannot be identified is anonymization (pseudonymization) of the data

Key rule: Opt-in = use only after the person agrees; opt-out = use until the person says stop.

Legal Affairs · AI-written, may contain errors

This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.