Possible leak of genetic testing information outside of Japan

NIPPT 国外での遺伝子検査の情報漏洩の可能性について

In some countries, personal information is not adequately protected. This is caused by a variety of factors, including inadequate legal systems, data management systems by governments and companies, and lack of technical security. Below is a detailed explanation of the reasons and cases where personal information is not protected.

1. Inadequate legal protection

  • Personal Information Protection Law not yet in place
  • In some countries, the legal framework for the protection of personal data may be inadequate. Where privacy and data protection laws do not exist or are very weak, personal data may not be properly handled by companies or governments.
  • Weak enforcement of the law
  • Even when a legal framework exists, the actual enforcement of it may be weak. If oversight bodies do not exist or penalties are lax, there is a risk that companies and organizations will disregard the law and abuse personal information.

2. Government surveillance and invasion of privacy

  • Excessive government surveillance
  • In some countries, governments have access to and monitor citizens’ personal information on a large scale.This is especially true in countries with strict restrictions on freedom of expression and privacy protection.For example, personal privacy can be violated through monitoring of online communications, location tracking, and recording of Internet activity.
  • Laws requiring access to data
  • In some countries, it is legal for governments to require companies to provide access to personal data. For example, they may require you to provide personal communication records or Internet history for reasons of counterterrorism or national security. There is a risk that such legal access could compromise an individual’s privacy.

3. Security Vulnerabilities and Data Leaks

  • Inadequate technical security
  • When databases and systems where personal information is stored are not adequately protected, there is an increased risk of personal data being compromised through hacking or cyber attacks. Especially in countries without a well-developed technological infrastructure, companies and governments often invest insufficiently in data security, making incidents of information leaks more likely to occur.
  • Unauthorized use by insiders
  • Inadequate data protection can lead to unauthorized use of personal data by employees within a company. Lax controls over personal data increase the risk that employees will misuse that data to violate personal privacy.

4. Selling or sharing personal information

  • Commercial use of personal information
  • In countries where legal restrictions are less stringent, personal information may be bought and sold for commercial purposes. Data collected by companies may be shared with third parties or sold for advertising and marketing purposes without the consent of the individual.
  • Presence of data brokers
  • In some countries, companies called data brokers are in the business of reselling personal information purchased from other companies. Data brokers may trade consumer purchase history, behavioral data, location data, and other information, which can easily lead to the abuse and misuse of personal information.

5. Invasion of privacy on the Internet

  • Social media data collection
  • Social media and online services collect user behavior data on a large scale. In some countries, these companies do not adhere to privacy policies and utilize data without individual consent. This raises the issue of user behavior, interests, and personal information being sold to third parties or used for advertising.
  • Phishing and fraudulent activities
  • Phishing scams and other forms of fraud may be used to defraud people of their personal information. Especially in countries and regions with inadequate security measures, cybercrime is rampant and can lead to the leakage of personal information.

Conclusion

Cases in which personal information is not protected are caused by a variety of factors, including inadequate legal protection, government surveillance, security vulnerabilities, commercial use by companies, and cybercrime. The reality is that in some countries in particular, personal information is not adequately protected due to a lack of legislation or an immature technological infrastructure.

Supervisor of the article


Dr. Hiroshi Oka

Director of CAP Laboratory

Graduated from Keio University, Faculty of Medicine

Doctor of Medicine

Medical Doctor