Japan: Issued ruling in investigation into a company over alleged Act on the Protection of Personal Information (APPI) violations

On 11 January 2023, the Personal Information Protection Commission (PIPC) concluded an investigation against a company for violating the Act on the Protection of Personal Information (APPI). The company was found to have unlawfully processed information regarding the bankruptcy status of some customers, which could result in financial discrimination against the affected individuals. Furthermore, the company failed to properly notify customers and obtain their consent for the disclosure of information, in violation of the APPI. As a result, the company may face civil penalties of up to JPY 1'000'000 and criminal penalties of up to one-year imprisonment.