取得情報の不正利用に罰則　無害化で事前承認―政府、通常国会提出へ・サイバー法案

　サイバー攻撃を未然に防ぐ「能動的サイバー防御」導入に向け、政府が検討する関連法案の概要が１６日、分かった。通信監視で取得した情報の不正利用や漏えいに罰則を規定。攻撃元のサーバーに侵入・無害化する措置は、独立した第三者機関の事前承認を原則として義務付けた。政府は２４日召集の通常国会に提出する方針だ。
　関連法案は(1)官民連携の強化(2)通信情報の利用(3)侵入・無害化措置の実施―が柱。官民連携では、電気や金融など基幹インフラを担う事業者らに、利用するＩＴ機器の届け出や、攻撃発生時の報告を求める。政府は被害防止に必要な情報提供などを行う。（2025/01/16-17:21）

The Japanese government plans to introduce penalties for unauthorized use and leakage of information obtained through communication monitoring for cyber defense, officials said Thursday.
   The penalties are part of a broader government plan to introduce active cyber defense, or pre-emptive action to prevent cyberattacks. The government will submit legislation to enact the plan to parliament during an ordinary session set to start on Jan. 24.
   The bill calls for mandatory prior approval by an independent organization to break into the server of an attack source and render it harmless, in consideration of the confidentiality of communications guaranteed by Article 21 of the Constitution.
   Under the bill, operators of key infrastructure, such as those in the electricity and financial sectors, will be required to report the information technology devices they use, and notify authorities when attacks occur. The government will provide them with information necessary to prevent damage.
   Communications subject to monitoring will be those between foreign countries as well as between Japan and other countries via foreign equipment suspected to be used for cyberattacks.