The Protection of Private Data in Japan under Duress

The Brief examines Japan’s existing legal and policy frameworks and assesses the implications for the future of data security and private data protection in the country. [...] One of the key steps under the APPI was the establishment of the Personal Information Protection Commission (PPC) as the primary regulator responsible for the implementation of the legislation. [...] LINE/NAVER Korea Data Leakage To examine the applicability of the APPI in this case, it is important to determine the nature of cooperation between the LINE and NAVER. [...] According to the law, LINE has a legal obligation to conduct appropriate and necessary supervision over NAVER, which is a data processor.8 In fact, the PPC guidelines also emphasise the importance of measures that involve visibility and supervising the processing of personal data by the outsourcing provider. [...] NTT West Data Leakage In this case, the leak is believed to have taken place over a decade, and the management ignored warnings on multiple occasions.12 The threat actor in the case, a former employee of the company, sold the leaked data to a third party, which included information such as addresses, names and phone numbers of customers.