Runs an essential service, in Japan

Act on the Prevention of Damage from Wrongful Acts against Important Computers (重要電子計算機に対する不正な行為による被害の防止に関する法律, Act 42 of 2025), Art. 5 · Read the law's page

• Applies to a specified social infrastructure business operator, meaning an operator designated under Article 50(1) of the Economic Security Promotion Act (Act 43 of 2022) that uses a specified important computer; reached by declaring that you operate an essential service. The Act and its ministerial order apply from 1 October 2026.
• On becoming aware of a specified infringement event on a specified important computer, or of an event the ministerial order names as a possible cause of one, report it to the minister in charge of your business and to the Prime Minister (Article 5 of the Act).
• File a first report promptly after becoming aware of the event, stating what you know at that time, and file a full report within 30 days of the day you became aware of it (Article 4(2) of the order).
• Include in each report the matters the order lists: the report category, an outline of the operator, an outline of the event, the computer affected, technical matters, the response taken and other notes (Article 4(3) of the order).
• Events within six months of your designation, or of a computer becoming a specified important computer, are outside the duty (Article 4(2)(1) and (2) of the order).
• Comply with a ministerial order to make or correct a report by a set deadline (Article 6 of the Act).

Act on the Prevention of Damage from Wrongful Acts against Important Computers (重要電子計算機に対する不正な行為による被害の防止に関する法律, Act 42 of 2025), Arts. 4 and 6 · Read the law's page

• Applies to a specified social infrastructure business operator, meaning an operator designated under Article 50(1) of the Economic Security Promotion Act (Act 43 of 2022) that uses a specified important computer; reached by declaring that you operate an essential service. The Act and its ministerial order apply from 1 October 2026.
• Notify the minister in charge of your designated business of each specified important computer you introduce, stating its product name and manufacturer name and the other matters the ministerial order sets (Article 4(1) of the Act).
• File the notice on the prescribed form within four months of the day you introduce the computer, unless the ministerial order excepts it (Article 2(1) of the order); a computer you already use on 1 October 2026 is notified within six months of that day (Supplementary Provisions, Article 4).
• Notify the minister of a later change to the notified matters, unless the change is minor as the ministerial order defines it (Article 4(3)).
• Supply the reports or materials the minister asks for to the extent needed to enforce Articles 4 and 5 (Article 9).
• Comply with a ministerial order to file or correct a notice by a set deadline (Article 6).