Japan: Adopted Enforcement Rules for the amended Act on Protection of Personal Information
Compare with different regulatory event:
Description
Adopted Enforcement Rules for the amended Act on Protection of Personal Information
The Personal Information Protection Commission issues the Enforcement Rules for the amended APPI. The enforcement rules specify rules for data breach notification, data pseudonymization, provision of data to third parties, cross-border data transfers and public disclosure.
Original sourceScope
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
executive
Government Body
data protection authority
Key regulatory dimensions
Regulated subjects
The businesses, government agencies or individuals affected by this policy or regulatory change.
producer / supplier
1
Type
Private organisation
Economic activity
cross-cutting
Category
All
Policy change by business practice
The detailed activities within the scope of this policy or regulatory change.
data (any form): storage (any form)
Regulatory tool
Preventive security requirement
Detective security requirement
Sanctions
Regulated subjects
1
personal data (all forms): transfer (any destination)
Regulatory tool
Preventive security requirement
User right to information about third-parties, with which data has been shared
User consent: Opt-in requirement
Sanctions
Regulated subjects
1