Japan: Parliament passes bill to amend APPI
OneTrust DataGuidance confirmed, on 5 June 2020, with Atsushi Okada, Partner at Mori Hamada & Matsumoto, that the National Diet ('the Parliament') passed the Bill ('the Bill') to amend the Protection of Personal Information Act (Act No. 57 of 2003 as amended in 2016) ('APPI'). In particular, the Bill was passed without any changes and introduces new obligations for personal information controllers, including mandatory breach reporting, new consent requirements for transfers to other entities handling personal information, as well as new pseudonymisation requirements. Furthermore, the Bill increases penalties against corporations for violations of Personal Information Protection Commission's ('PPC') orders.
The amended APPI will come into force no later than two years after its promulgation, as the PPC has not yet determined the exact effective date.