Japan: Issued PPC Caution on Handling Sensitive Personal Data in Healthcare

On 25 September 2024, the Personal Information Protection Commission issued a caution notice to hospitals, clinics, and pharmacies across Japan, emphasising the importance of proper handling of personal and sensitive personal data. This action follows a series of leakage incidents, which, according to the regulator, highlighted the need for enhanced safety management measures in accordance with the Act on the Protection of Personal Information. The notice outlines key points for preventing leaks and other errors, including the establishment of basic policies, formulation of handling regulations, and staff training. It also references specific high-risk situations and example measures to aid healthcare providers in improving their data protection practices.