DpoWorks
  • Home
  • Our Services
  • Free resources
      Proteus®NextGen Data Privacy™
    • Privacy Research
      Free to use data privacy research

      Key Capabilities

      • Latest privacy news tracking
        Product versions

        Latest privacy news tracking

        Track the latest news, breaches and fines

        Key features

        • Tracks the latest breaches and fines
        • View by industry
        • View by breach method
        • View by privacy topic
        • Links to original articles
        • Free to use

         

        Learn more »

        Latest privacy news tracking
      • Latest Threat Intelligence
        Product versions

        Latest Threat Intelligence

        Track the Common Vulnerability Exposures (CVEs)

        Key features

        • Tracks the latest vulnerabilities
        • View by company
        • View by breach method
        • Links to NVD
        • Free to use

         

        Learn more »

        Latest Threat Intelligence
      • Breach modelling and ROI calculator
        Product versions

        Breach modelling and ROI calculator

        Model what a breach would look like for you in your industry and use this to calculate your return on investment

        Key features

        • Model your breach
        • Assess the severity
        • Compare by industry
        • Breakdown costs
        • Export to your business plan
        • Free to use

         

        Learn more »

        Breach modelling and ROI calculator
  • Privacy news
  • Company
    • About Us
    • FAQ
    • Contact Us
Privacy regulation research
  • Regulation comparison tool
  • Privacy news
  • Breach/ROI calculator
  • Threat Intelligence
  • Show
  • Clear filters
  • Japan Adequacy X

Commission DecisionJapan Adequacy Decision

1Introduction

2THE RULES APPLYING TO THE PROCESSING OF DATA BY BUSINESS OPERATORS 2.1. The Japanese data protection framework

2.2Material and personal scope

2.2.1 - Definition of personal information2.2.2 - Definition of personal data2.2.3 - Definition of retained personal data2.2.4 - Definition of anonymously processed personal information2.2.5 - Definition of Personal Information Handling Business Operator (PIHBO)2.2.6 - Concepts of controller and processor2.2.7 - Sectoral exclusions

2.3Safeguards, rights and obligations

2.3.1 - Purpose limitation2.3.2. - Lawfulness and fairness of processing2.3.3. - Data accuracy and minimisation2.3.4. - Storage limitation2.3.5. - Data security2.3.6. - Transparency2.3.7. - Special categories of data2.3.8. - Accountability2.3.9. - Restrictions on onward transfers2.3.10. - Individual rights

2.4Oversight and enforcement 2.4.1. Independent oversight

2.4.2 - Judicial redress

3ACCESS AND USE OF PERSONAL DATA TRANSFERRED FROM THE EUROPEAN UNION BY PUBLIC AUTHORITIES IN JAPAN

3.1 - General legal framework3.2 - Access and use by Japanese public authorities for criminal law enforcement purposes3.2.1 - Legal basis and applicable limitations/safeguards3.2.1.1 - Compulsory investigation based on a court warrant3.2.1.2 - Request for voluntary disclosure based on an "enquiry sheet"3.2.1.3 - Further use of the information collected3.2.2 - Independent oversight3.2.3 - Individual redress3.3 - Access and use by Japanese public authorities for national security purposes3.3.1 - Legal basis and applicable limitations/safeguards 3.3.2 - Independent oversight 3.3.3 - Individual redress

4CONCLUSION: ADEQUATE LEVEL OF PROTECTION FOR PERSONAL DATA TRANSFERRED FROM THE EUROPEAN UNION TO BUSINESS OPERATORS IN JAPAN

5ACTION OF DATA PROTECTION AUTHORITIES AND INFORMATION TO THE COMMISSION

6PERIODIC REVIEW OF THE ADEQUACY FINDING

7SUSPENSION OF THE ADEQUACY DECISION

8FINAL CONSIDERATIONS

  • Home
  • Japan Adequacy
  • 2.3 - Safeguards, rights and obligations

2.3

Safeguards, rights and obligations

2.3.1: Purpose limitation2.3.2.: Lawfulness and fairness of processing2.3.3.: Data accuracy and minimisation2.3.4.: Storage limitation2.3.5.: Data security2.3.6.: Transparency2.3.7.: Special categories of data2.3.8.: Accountability2.3.9.: Restrictions on onward transfers2.3.10.: Individual rights

© 2025 Proteus-Cyber Ltd. Hack Exposed Data in Catholic Church Sex-Abuse Cases Disclaimer

Ask a privacy expert?

If you have questions regarding privacy legislation, our team will endeavour to provide you with an answer in a few days. Please complete this form and include the 'name' of the legislation your query is about with details concerning the query.

Click image to refresh and enter in lower case

Proteus-Cyber