Compliance with the April 2022 Revision of the Personal Information Protection Act
Leave it to us for preparing Privacy Policy!

Since the Privacy Act was amended on April 1, 2022, it is necessary to respond to the amendment of your privacy policy. Our firm has extensive experience in creating privacy policies and can also create privacy policies that comply with the revised Personal Information Protection Act. If your company has not yet complied with the revision of the Personal Information Protection Act, please contact our firm for the necessary amendments to your privacy policy as soon as possible.

​

Major Amendments:

• Rights to suspend use and erase personal data in business entity's possession have been expanded.

• Individuals can now specify the method of disclosure of retained personal data of business entities.

• Short-term stored data that the business entity erases within 6 months is now included in retained personal data.

• The scope of information that can be provided to third parties has been restricted.

• Individuals can now request disclosure of records provided to third parties.

• The Personal Information Protection Commission and the individual must be notified when information is leaked and there is a risk of harm to the individual's rights or interests.

• Penalties for violation of the Personal Information Protection Act strengthened.

• Establishment of "Pseudonymized Processed Information"

• Tighter regulations for businesses located overseas, etc.

​

In addition to the response to the revision of the Personal Information Protection Act, there has been no end to the incidents of personal information leaks by businesses, and the momentum for the protection of personal information is growing worldwide, making the handling of personal information one of the most important topics for businesses to pay attention to.

For example, the EU General Data Protection Regulation (commonly known as GDPR), which became effective on May 25, 2018, has stricter provisions regarding the handling of personal data by businesses as follows

(1) Expansion of the scope of personal data (PC cookie information and browsing history are included in the scope of personal data),
(2) Expansion of the scope of application (businesses outside the European Economic Area (EEA) may also be subject to the application),
(3) Higher fines for violators, etc.

​

In addition, the California Consumer Protection Act (commonly known as the CCPA) was taken effect on January 1, 2020, and in line with these global trends, stricter personal information protection laws are being considered in Japan, making the creation and review of privacy policies a very important issue for businesses that obtain, store and use customers' personal information.

​

Our administrative scriveners (GYOSEISHOSHI) have experience in drafting privacy policies that comply with the GDPR, as well as in drafting and reviewing privacy policies that comply with Japan's Personal Information Protection Act.

​

Fee 1,000$ (excl.tax)