The European Commission announced on 23 January 2019 that it has
adopted an adequacy decision on Japan (its press release can be
found here).1 This is a
result of the assessment process which began on 5 September 2018,
the background of which can be found in our previous blog
here.
Japan's data protection authority, the Personal Information
Protection Commission (PPC), has also adopted its
equivalent decision on Japanese personal data flows to the EU. This
mutual recognition allows the safe free flow of personal data
between the two territories, creating the world's largest arena
of secure data flows.
New rules for Japanese Business Operators
The European Commission has found that Japan's data
protection legislation and practice constitutes an "adequate
framework". This is based on analysis of the Japanese Act on
the Protection of Personal Information (APPI)
already in place, together with the newly agreed Supplementary
Rules (see below).
