Duty LXD-1108
Processes de-identified data, in Japan
Each law's tag says when it binds: since in force from a date not yet set not yet in force
Act on the Protection of Personal Information, pseudonymized and anonymized personal informationsince 6 lines
Act No. 57 of 2003, as amended by Act No. 37 of 2021, Arts. 41-46 · Read the law's page
- Process personal information into pseudonymized personal information only to the standards the Personal Information Protection Commission sets, secure the deleted information and the means of processing against leaking, and keep the pseudonymized personal information to the specified purpose of use (Article 41(1) to (3)).
- Do not collate pseudonymized personal information with other information in order to identify the person it came from, whether you prepared it or received it, and, where the information is not personal information, do not acquire the deleted information either (Articles 41(7) and 42(3)).
- Do not provide pseudonymized personal information to a third party, whether or not it is personal information, except in cases based on laws and regulations (Articles 41(6) and 42(1)).
- Process personal information into anonymized personal information only to the standards the Commission sets so that a specific individual cannot be identified and the information cannot be restored, secure the deleted identifiers and the processing method against leaking, and disclose the categories of individual information it contains (Article 43(1) to (3)).
- Before you provide anonymized personal information to a third party, disclose the categories of individual information it contains and the means of providing it, and state explicitly to the third party that the information is anonymized personal information (Articles 43(4) and 44).
- Do not collate anonymized personal information with other information in order to identify a person, and, if you received it and did not prepare it, do not acquire the deleted identifiers or the processing method (Articles 43(5) and 45).
Act on the Protection of Personal Information, contact particulars in pseudonymized and anonymized informationfrom a date not yet set1 line
Act No. 57 of 2003, as amended by Act No. 56 of 2026, Arts. 42(4), 46-2 · Read the law's page
- If you handle pseudonymized personal information or anonymized personal information that contains a description Article 2(8) lists, such as the location of a person's residence or workplace, do not use it by a method likely to encourage or induce an illegal or unjust act and do not acquire it by deceit or other wrongful means (Articles 42(4), 46-2 and 31-2).