Regulations › Rest of world › Japan
APPI
Act on the Protection of Personal Information (Japan)
WhenIn effect since 1 April 2005
Who enforces itPersonal Information Protection Commission
Who it applies toBusinesses handling personal information in Japan.
Tell the regulatorReport reportable breaches (sensitive data, financial harm, improper purpose, over 1,000 perso…
DPO requiredNo DPO requirement
RegistrationNo general registration
Transfers abroadTransfer abroad needs prior consent after information on the destination regime, an adequate c…
Request deadlineRespond 'without delay'; no fixed number of days in the Act
Maximum fineCriminal corporate fine up to JPY 100 million for violating PPC orders or unlawful database pr…
Recent developments
Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.
Regulations library
Every US state privacy law, on one map
24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.
- In force
- Coming into force
- Sector laws