Japan: Bill to amend Japanese personal information protection act
Published 10 March 2015
An amendment to the Japanese Act on protection of personal information was submitted to the Japanese Parliament on 10 March 2015 (the Bill).
The key aspects of the Bill include clarification of the definition of personal information, the creation of an independent watchdog committee and the introduction of restrictions on the processing of sensitive information, tighter controls on disclosure to third parties and an obligation on the data controller to keep accurate records.
In addition, it is proposed that the Bill will have extra-territorial effect, meaning that those collecting the personal data of Japanese citizens will also be required to comply with the majority of the Bill. This sort of extra-territorial effect is also proposed under the Regulation.
A copy of the Bill is available here (Japanese).
What action could be taken to manage risks that may arise from this development?
Companies should keep track of the Bill's progress because if enacted it will impact the data protection policies and procedures for Japanese citizen data.