The Personal Information Protection Law, which went into effect in April 2005, in principle bars organizations that possess or handle personal information from providing it to third parties without the consent of the people concerned. Good intentions are behind the law.
Nevertheless, it has led to the creation of many absurd situations in which individuals and organizations are refused information that is necessary, even when it is of a benign nature. The government should revise the law to establish a proper balance between the protection of personal information and reasonable access to it for legitimate purposes.
While the law bans organizations in principle from providing information on individuals to third parties without the individuals' consent, it does allow for exceptional cases in which they may provide such information without consent. The exceptions include occasions when the parties seeking information are performing a legal duty; when the information is necessary to protect the lives and property of the individuals concerned; when the organizations are obliged to cooperate with the central and local governments executing their responsibilities; and when the information is necessary to promote the health of the public and the healthy growth of children.