Japan: Personal Information Protection Commission announced Bill amending Act on the Protection of Personal Information and Other Acts including data protection authority governance

On 18 March 2026, the Personal Information Protection Commission announced the Bill amending Act on the Protection of Personal Information and Other Acts. The Bill would apply to both public and private entities handling personal data. It would expand the supervisory and enforcement powers of the Personal Information Protection Commission. The Commission would be able to recommend or order personal information handling business operators to take measures, including cessation of violations, notification to individuals of facts relating to violations, and other measures necessary to protect the rights and interests of individuals.