🇯🇵
Japan

Applicability of the Japan Data Protection Law (APPI)

Japan's data protection framework is primarily governed by statutory legislation that establishes rules for the handling of personal information. The Act on the Protection of Personal Information (個人情報の保護に関する法律) serves as the principal legal instrument regulating personal information protection in Japan.

The Act on the Protection of Personal Information was adopted on May 30, 2003 and became effective on April 1, 2005. The legislation has undergone significant amendments since its original enactment, with the most recent amendments adopted on June 12, 2020 and becoming effective on April 1, 2022.

The APPI extends its jurisdiction to foreign entities based on three cumulative conditions:

  1. The entity must be engaged in "supplying a good or service to a person in Japan" ("国内にある者に対する物品又は役務の提供")
  2. The processing must involve personal information that makes Japanese residents identifiable
  3. The data processing occurs in a foreign country

The law covers various forms of data processing:

  • Personal information
  • Pseudonymized personal information
  • Anonymized personal information
  • Information related to personal information


🇯🇵

Japan

keyboard_arrow_down

Gavel Factors: (1)

🛍️ Offering Goods and Services to Data Subjects in Jurisdiction

globe_book Resources (8)

link Japan APPIinfolink Japan APPIinfolink DLA Piper Data Protection Laws of the World – Japaninfolink Anderson Mori & Tomotsune – Data Protection/Data Breachinfolink Academic eXchange for Information Environment and Strategy (AXIES)infolink Cabinet Office, Government of Japan – Data Protection Guidelinesinfolink Japan Data Protection Officer Associationinfolink Personal Information Protection Commission (PPC)

GroupsConsultants: (1)

Consultations

Need consultation on this jurisdiction?
External consultations
1 external consultations
Leave a request and our managers will help you contact external consultants
❖ Jurisdictions: ➤ Japan