Law / Japan

Act on the Protection of Personal Information, enforcement

Act No. 57 of 2003, as amended by Act No. 37 of 2021, Chapters VI, VIII

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 1 April 2022.

An enforcement supervision rule binding public and private bodies.

As of 29 August 2026.

What it requires

  • An app processing the personal data of a person in Japan must be prepared to answer to the Personal Information Protection Commission's investigative, recommendation, and order powers, and a responsible individual risks criminal liability for violating a PPC order; Japan has no APPI-specific private right of action, so an aggrieved person's civil remedy runs through general tort law instead.

If you get it wrong

Private right of actionNo

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

The Personal Information Protection Commission (PPC) is Japan's independent supervisory authority, holding recommendation and order powers under Chapter VI. Violating a PPC order under Art. 148(2) or (3) is a criminal offense under Art. 178, punishable for an individual by imprisonment with work for not more than one year or a fine of not more than JPY 1,000,000.

APPI carries no dedicated statutory private right of action; a data subject's civil remedy runs through general tort law under Civil Code Art. 709, outside APPI itself, so enforcement of the statute is PPC-only.

When LexLint raises it

  • crawls_web
  • trains_models
  • generates_content
  • deploys_chatbot
  • automated_outreach
  • high_risk_decisions
  • processes_voice
  • processes_biometrics

Read the law

official statute text, Japanese Law Translation portal

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example  ·  Lint your app