Support Centre

Japan: PPC announces change to data breach reporting

The Personal Information Protection Commission ('PPC') announced, on 14 February 2020, that the method of reporting a data breach has changed. In particular, the PPC notes that from 27 March 2019, the method of reporting data breaches has changed from submission by fax or mail to submitting a report form ('the Form'). In addition, the PPC highlights that data breaches may not have to be reported if the business is subject to an accredited personal information protection organisation or operates in a field in which the PPC's authority is delegated to the Minister of Business Administration. 

You can read the press release here and access the Form here, both only available in Japanese.