"Newsletter Data Protection (February 2018)"

Newsletter Data Protection (February 2018)

Published: (Thu) 01 Feb 2018

Due to the continuing digitalization of society and business the issue of data protection gains increasing importance also from a legal perspective. Faced with the rapid technological developments, Japan has reformed the Japanese Data Protection Act (“Act on Protection of Personal Information“ – “APPI“), which has become effective on 30 May 2017 (“Amendment”). The Amendment is the first major reform of the APPI since its enactment in 2005. This special newsletter provides an overview of the main changes to the APPI as well as the measures companies need to consider in light of the Amendment.

1. Reform of the data protection law in Japan
The only statutory law on the protection of personal information in Japan is the APPI. The APPI establishes rules concerning handling of personal information, including the acquisition, use and transfer of such personal information. While not legally binding, for certain areas guidelines established by the competent ministry inter alia include suggestions for interpreting the APPI, e.g. the “Financial Services Agency of Japan Guidelines” (“FSA Guidelines”), the “Ministry of Economy, Trade and Industry of Japan Guidelines” (“METI Guidelines”), and the “Ministry of Health, Labor and Welfare Guidelines” (“MHLW Employment Guidelines”).

a) Under the Amendment, the scope of the APPI has been extended. In its pre-amended version, the APPI was not applicable to business operators having no more than 5,000 identifiable individuals in its database on any day during the past six months. For a large number of companies, in particular small and medium-size subsidiaries of foreign companies, the APPI therefore did not apply. This has changed with the Amendment. Due to the extension of the scope, also those business operators, handling a smaller number of data, so-called “Small-Size Database Operators“, are now covered and need to comply with the requirements of the APPI.

b) For the first time the Amendment introduces and defines the term “Sensitive Personal Information“. This new category includes information, such as race, religious beliefs, social status, criminal records, and medical history or any other information that may lead to a discrimination or prejudice. The collection and handling of Sensitive Personal Information by a business operator requires a prior explicit consent of the individual concerned. Several directives (such as of the FSA) further include additional provisions concerning the handling of such sensitive personal information.

c) Likewise a new category of “Anonymized Data“ has been introduced. This category includes any personal data that does not contain particular descriptions or items that could be used to identify a person. No prior consent is necessary for the transfer of anonymized data to third parties under certain conditions.

d) Additionally, a New Data Protection Committee for Supervision and Enforcement of Data Protection Regulations was established. The Committee, which consists of experts from practice and academics, operates as a first point of contact for questions regarding data protection as well as supervisory body. The further responsibilities include defining the countries which will be considered as having an adequate level of data protection as Japan as further described under item 1. e) below.


Continue Reading (PDF)

More Newsletters…

Newsletter Overtime (October 2019)

Overtime is one of the most sensitive topics in Japanese labor relations. Following the suicide of a young female employee of a major Japanese company in December 2015 due to working extensive hours, resulting in the resignation of the representative director of said company, the Japanese public’s perception of the social and legal consequences of overwork have changed and authorities are again on high alert. As a consequence, overtime related investigations by the competent authorities are expected to increase.

read more

Newsletter Labor Law Restructuring Human Resources (October 2019)

An increasingly competitive and cost oriented business environment often requires employers to review and restructure their human resources. Such process may include anything from the revision of salary schemes and compensation conditions to redundancy proceedings or even dismissals. This newsletter highlights some of the legal aspects to be observed when restructuring employment relations, in particular with regard to the adjustment of salary and working hours and the reduction of the company’s workforce.

read more

Newsletter Corporate Governance Structures (October 2019)

The Japanese Companies Act (JCA) offers several types of corporate governance schemes, which are mainly designed for public “large” corporations (i.e. companies with a paid-in share capital of JPY 500 million or more, or liabilities of JPY 20 billion or more), as such companies are obliged to implement a corporate governance structure prescribed under the law. However, also for private companies.

read more