PrivacyTerrain

Editorial caveat

Structured values summarize official materials for research and planning. They are reviewed by humans before publication and should not be treated as legal advice.

medium confidence, Strong base, but transfer and consent nuance should be deepened.

At a glance

Key presentation points

A compact summary of high-signal fields before the full structured record.

Effective statusin-force1 primary + 1 secondary • Reviewed 17/04/2026

Territorial scopeApplies to business operators handling personal information in Japan and, in certain circumstances, outside Japan targeting individuals in Japan.1 primary + 1 secondary • Reviewed 17/04/2026

Regulator or enforcement authority summaryPPC1 primary • Reviewed 17/04/2026

Requires legal basisNo1 primary + 1 secondary • Reviewed 17/04/2026

Structured record

Regulation details grouped by topic

Each value keeps its field context, linked sources, notes, and review date together to avoid detached or ambiguous statements.

Identity

Effective status: in-forceSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: APPI text (primary); PPC guidance (secondary)Note: Seeded as part of the APAC expansion wave. Requires follow-up editorial review.
Law status: activeSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: APPI text (primary); PPC guidance (secondary)Note: Seeded as part of the APAC expansion wave. Requires follow-up editorial review.
Effective date: 2005-04-01Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: APPI text (primary); PPC guidance (secondary)Note: Seeded as part of the APAC expansion wave. Requires follow-up editorial review.
Last amended: 2022-04-01Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: APPI text (primary); PPC guidance (secondary)Note: Seeded as part of the APAC expansion wave. Requires follow-up editorial review.

Scope

Extraterritorial application: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: APPI text (primary); PPC guidance (secondary)Note: Seeded as part of the APAC expansion wave. Requires follow-up editorial review.
Territorial scope: Applies to business operators handling personal information in Japan and, in certain circumstances, outside Japan targeting individuals in Japan.Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: APPI text (primary); PPC guidance (secondary)Note: Seeded as part of the APAC expansion wave. Requires follow-up editorial review.
Private sector coverage: Applies to business operators handling personal information.Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: APPI text (primary); PPC guidance (secondary)Note: Seeded as part of the APAC expansion wave. Requires follow-up editorial review.
Public sector coverage: Separate administrative and independent agency rules apply to public-sector processing.Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: APPI text (primary); PPC guidance (secondary)Note: Seeded as part of the APAC expansion wave. Requires follow-up editorial review.

Definitions

Personal data definition: Personal information means information about a living individual that can identify the specific individual.Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: APPI text (primary); PPC guidance (secondary)Note: Seeded as part of the APAC expansion wave. Requires follow-up editorial review.
Sensitive data recognized: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: APPI text (primary); PPC guidance (secondary)Note: Seeded as part of the APAC expansion wave. Requires follow-up editorial review.

Legal Basis

Legal bases: consent, statutory exception, specified purpose useSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: APPI text (primary); PPC guidance (secondary)Note: Seeded as part of the APAC expansion wave. Requires follow-up editorial review.
Requires legal basis: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: APPI text (primary); PPC guidance (secondary)Note: Seeded as part of the APAC expansion wave. Requires follow-up editorial review.

Rights

Right of access: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: APPI text (primary); PPC guidance (secondary)Note: Seeded as part of the APAC expansion wave. Requires follow-up editorial review.
Right to deletion: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: APPI text (primary); PPC guidance (secondary)Note: Seeded as part of the APAC expansion wave. Requires follow-up editorial review.
Right to object: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: APPI text (primary); PPC guidance (secondary)Note: Seeded as part of the APAC expansion wave. Requires follow-up editorial review.
Right to portability: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: APPI text (primary); PPC guidance (secondary)Note: Seeded as part of the APAC expansion wave. Requires follow-up editorial review.
Right to appeal: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: APPI text (primary); PPC guidance (secondary)Note: Seeded as part of the APAC expansion wave. Requires follow-up editorial review.
Right to erasure or delete summary: Conditional deletion / suspension rightsSupport: 1 primary • Reviewed 17/04/2026Sources: APPI text (primary)Note: Japan's APPI is better summarized through conditional suspension / deletion mechanics than a pure GDPR-style erasure label.
Right to rectification or correction summary: Correction rights for retained personal dataSupport: 1 primary • Reviewed 17/04/2026Sources: APPI text (primary)Note: APPI uses its own framing around correction and retained personal data.

Breach

Breach deadline (hours): 0Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: APPI text (primary); PPC guidance (secondary)Note: Seeded as part of the APAC expansion wave. Requires follow-up editorial review.
Breach notification required: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: APPI text (primary); PPC guidance (secondary)Note: Seeded as part of the APAC expansion wave. Requires follow-up editorial review.

Governance

DPO required: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: APPI text (primary); PPC guidance (secondary)Note: Seeded as part of the APAC expansion wave. Requires follow-up editorial review.
Impact assessment required: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: APPI text (primary); PPC guidance (secondary)Note: Seeded as part of the APAC expansion wave. Requires follow-up editorial review.
Records of processing required: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: APPI text (primary); PPC guidance (secondary)Note: Seeded as part of the APAC expansion wave. Requires follow-up editorial review.

Enforcement

Maximum fine: Enforcement includes administrative orders and criminal sanctions, with stronger penalties after recent amendments.Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: APPI text (primary); PPC guidance (secondary)Note: Seeded as part of the APAC expansion wave. Requires follow-up editorial review.
Private right of action: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: APPI text (primary); PPC guidance (secondary)Note: Seeded as part of the APAC expansion wave. Requires follow-up editorial review.
Regulator or enforcement authority summary: PPCSupport: 1 primary • Reviewed 17/04/2026Sources: APPI text (primary)Note: Japan's privacy enforcement and guidance framework centers on the PPC.

Transfers

Cross-border transfer restricted: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: APPI text (primary); PPC guidance (secondary)Note: Seeded as part of the APAC expansion wave. Requires follow-up editorial review.
Data localization required: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: APPI text (primary); PPC guidance (secondary)Note: Seeded as part of the APAC expansion wave. Requires follow-up editorial review.

Marketing

Cookie consent rule: Cookie and tracking analysis is shaped by APPI guidance, especially around personal-related information and consent for onward use.Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: APPI text (primary); PPC guidance (secondary)Note: Seeded as part of the APAC expansion wave. Requires follow-up editorial review.

Official sources

APPI textPrimary official law • en • html
PPC guidanceSecondary official material • en • html

Japan