-11-
of the results, correct, add, or delete the retained personal data.
2 When a business operator handling personal information has corrected, added,()
or deleted all or part of the retained personal data as requested or has decided not
to make such correction, addition, or deletion, the business operator shall notify
the person o f that effect including the content of the correction, a ddition, or(
deletion if performed without delay.)
()Article 27 Discontinuance of the Utilization, etc.
1 Where a business operator handling personal information is requested by a()
person to discontinue using or to erase such retained personal data as may lead to
the identification of the person on the ground that the retained personal data is
being handled in violation of Article 16 or has been acquired in violation of Article
17, and where it is found that the request has a reason, the business operator
shall discontinue using or erase the retained personal data concerned without
delay to the extent necessary for redressing the violation. However, this provision
shall not apply to cases in which it costs large amount or otherwise difficult to
discontinue using or to erase the retained personal data and in which the business
operator takes necessary alternative measures to protect the rights and interests
of the person.
2 Where a business operator handling personal information is requested by a()
person to discontinue providing to a third party such retained personal data as
may lead to the identification of the person on the ground that the retained
personal data is being provided to a third party in violation of paragraph 1 of
Article 23, and where it is found that the request has a reason, the business
operator shall discontinue providing the retained personal data to a third party
without delay. However, this provision shall not apply to cases in which it costs
large amount or otherwise difficult to discontinue providing the retained personal
data concerned to a third party and in which the business operator takes
necessary alternative measures to protect the rights and interests of the person.
3 When a business operator handling personal information has discontinued using()
or has erased all or part of the retained personal data as requested under
paragraph 1 or has decided not to discontinue using or not to erase the retained
personal data or when a business o perator handling personal information has
discontinued providing all or part of the retained personal data to a third party as
requested under the provision of the preceding paragraph or has decided not to
discontinue providing the retained personal data to a third party, the business
operator shall notify the person of that effect without delay.
()Article 28 Explanation of Reasons
When a business operator handling personal information notifies a person