Japan: Opened consultation on draft to partially amend the General Guidelines on the Personal Information Protection Act (General Guidelines)

On 14 September 2023, the Japanese Personal Information Protection Committee (PIPC) opened a consultation on the draft to partially revise the General Guidelines on the Personal Information Protection Act (General Guidelines) until 13 October 2023. The draft outlines significant amendments to the Guidelines, including strengthening the obligations of personal information handlers to prevent the leakage, loss, or damage of personal data. These obligations are to be tailored to the specific nature of the handler's operations, the type and volume of data they handle, and associated risks. It also outlines reporting obligations for data breaches, stressing the importance of prompt reporting, as well as the responsibility to notify affected individuals and exemptions from such notifications. Additionally, it offers guidance on security measures tailored to businesses of different scales to prevent data breaches.