NO&T Japan Legal Update
Recently, the Personal Information Protection Commission of Japan (the “PPC”) has been proactive in publicizing cases of data breaches that have had a significant social impact, together with the names of the companies.
I. Background
With the partial enforcement of the amended Act on the Protection of Personal Information (the “Act”) from January 2016, the PPC was established as a regulatory body responsible for managing and ensuring compliance with the Act. Under the Act, the PPC has been granted supervisory authority over companies that had previously been regulated by the relevant competent ministers. Specifically, the PPC is empowered to:
(March 2025)
Yoshinobu Koyama, Masato Kumeuchi, Masanori Tosu (Co-author)
Patricia O. Ko
(February 2025)
Keiji Tonomura, Minh Thi Cao Koike, Akira Komatsu, Yuki Matsumiya (Co-author)
Shunsuke Minowa, Poonyisa Sornchangwat, Niparat Pothong (Co-author)
