These standards may be applied to business entities of any size and any type that process personal data, either wholly or in part, using electronic computers or other automatic processing systems, including personal data processed in document form for the purpose of processing by an automatic processing system. Business entities may apply these standards in the process of performing any of the following: a) creating, implementing, maintaining, and improving their own compliance program, b) personally confirming that their own compliance program conforms to these standards and personally declaring the conformance, or c) requesting external organizations or the subjects of the data to confirm that the compliance program conforms to these standards.

JIS Q 15001:2006