Digital Policy Alert logo

Japan: Amended Act on Protection of Personal Information including data protection regulation enters into force with grace period

Policy overview

Description

Amended Act on Protection of Personal Information including data protection regulation enters into force with grace period

On 17 July 2026, the amended Act on the Protection of Personal Information was promulgated and entered into force with transitional implementation periods. The Act applies to both public and private entities handling personal data and introduces def…

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
executive
Government Body
central government

Complete timeline of this policy change

Hide details
2026-03-18
under deliberation

On 18 March 2026, the Personal Information Protection Commission announced a Bill to amend the Act …

2026-04-07
under deliberation

On 7 April 2026, the Cabinet approved the draft Bill amending the Act on the Protection of Personal…

2026-05-26
under deliberation

On 26 May 2026, the Bill amending the Act on the Protection of Personal Information was passed by t…

2026-07-10
adopted

On 10 July 2026, the Bill amending the Act on the Protection of Personal Information was adopted by…

2026-07-17
in grace period

On 17 July 2026, the amended Act on the Protection of Personal Information was promulgated and ente…

2027-01-17
in force

On 17 January 2027, the public notice provisions under the amended Act on the Protection of Persona…