Japan: Issue guidance to BIPROGY regarding non-compliance with data protection obligation

On 21 September 2021, Japan’s Personal Information Protection Commission (PPC) issued guidance to the company BIPROGY following an investigation that found violations of the Act on the Protection of Personal Information (APPI) in relation to the security of handling of information. In particular, the PPC found the company was not complying with sensitive personal data handling obligations. The PPC recommended that the company implement prevention security measures in the handling of information and enforce measures internally and improve understanding among workers and subcontractors on the handling of personal data.