Clifford Chance

Amendments to the Protection of Personal Information Act of Japan

29 June 2020

The protection of personal data has been an area of increasing focus in Japan in recent years following a series of high profile data breaches. The most recent amendment (the Amendment) establishes a reporting obligation in the event of a data breach, provides stronger rights to data subjects and introduces restrictions on the provision of cookies to third parties. As the Japanese regulator will be able to require foreign companies to report how personal data is being managed, both Japanese and foreign companies should consider how their privacy policies may need to be amended in relation to the use and protection of personal data in Japan.

Download PDF