Act on the Protection of Personal Information, statistics-creation consent exemption

Act No. 57 of 2003, as amended by Act No. 56 of 2026, Arts. 30-2, 31-3

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

A comprehensive regime rule binding public and private bodies.

As of 23 September 2026.

What it requires

This duty is enacted but not yet in force; it takes effect on a day fixed by Cabinet Order no later than 16 July 2028.
An app may acquire sensitive personal information that is already publicly available, without the data subject's consent, for the purpose of creating statistics or other large-scale trend analysis, or of providing it to a third party for that purpose, if it publishes the details of the statistics-creation activity over the internet.
An app may provide personal information or personal-related information to a third party that needs it for statistics creation, without the data subject's consent, if both parties publish the statistics-creation details over the internet and a written agreement with the third party states the provision is made under this provision; the recipient may not use it beyond that stated purpose or pass it on to a further third party.

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

New Arts. 30-2 and 31-3 create a statistics creation etc. exemption, defined at Art. 2(13) as extracting and analyzing large volumes of information to produce trend or characteristic information of a kind the Personal Information Protection Commission's rules find low-risk to individual rights, letting a business acquire already-public sensitive personal information, or provide personal information or personal-related information to a third party, for that purpose without the data subject's consent, conditioned on publishing the statistics-creation details online and, for third-party provision, a written agreement so stating; the recipient may not use the data beyond the published purpose or pass it on further.

A parallel exemption at Arts. 69(2)(4) and 72-3 lets an administrative organ provide held personal information for the same purpose; it has not yet commenced.

When LexLint raises it

crawls_web
trains_models

Read the law

official bill outline (法律案要綱), Personal Information Protection Commission, matching Act No. 56 of Reiwa 8 as promulgated

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app