🇯🇵
Japan

The APPI extends its jurisdiction to foreign entities based on three cumulative conditions:

  1. The entity must be engaged in "supplying a good or service to a person in Japan" ("国内にある者に対する物品又は役務の提供")
  2. The processing must involve personal information that makes Japanese residents identifiable
  3. The data processing occurs in a foreign country

The law covers various forms of data processing:

  • Personal information
  • Pseudonymized personal information
  • Anonymized personal information
  • Information related to personal information


🇯🇵

Japan

keyboard_arrow_down

Gavel Factors: (1)

🛍️ Offering Goods and Services to Data Subjects in Jurisdiction

globe_book Resources (6)

link DLA Piper Data Protection Laws of the World – Japaninfolink Anderson Mori & Tomotsune – Data Protection/Data Breachinfolink Academic eXchange for Information Environment and Strategy (AXIES)infolink Cabinet Office, Government of Japan – Data Protection Guidelinesinfolink Japan Data Protection Officer Associationinfolink Personal Information Protection Commission (PPC)

GroupsConsultants: (1)

Consultations

Need consultation on this jurisdiction?
External consultations
1 external consultations
Leave a request and our managers will help you contact external consultants
❖ Jurisdictions: ➤ Japan