Japan: Bill on the Development of the Cyber ​​Response Capability Strengthening Act was introduced to House of Representatives

On 7 February 2025, the Bill on the Development of the Cyber ​​Response Capability Strengthening Act was introduced to the House of Representatives. The Bill establishes the roles of the Cabinet Cyber Officer and the Cyber Communications Information Supervisory Commission, an independent body overseeing specific cybersecurity activities. Changes to the Police Duties Execution Act grant specialised cybersecurity officers the authority to take preventive measures against cyber threats. They may instruct system administrators to remove harmful data or intervene in affected systems to prevent damage when there is an urgent risk to life, property, or critical infrastructure. For computers outside Japan, only National Police Agency officers may take such action, and only after consulting the Foreign Minister. Amendments to the Self-Defence Forces Act empower the Prime Minister to direct units to implement "communications protection measures" against highly organised cyber attacks from abroad that threaten critical systems. These measures apply to systems handling classified defence and economic security information. Both police cybersecurity officers and Self-Defence Forces personnel require prior approval from the Cyber Communications Information Supervisory Commission before taking protective action, except in emergencies, where they must notify the Commission afterward. The Commission reviews actions and may recommend changes. The Bill also updates the Basic Act on Cybersecurity, requiring information system suppliers to assist users with system maintenance and incorporate security considerations into system design.