This chapter was last reviewed and updated on 25 December 2023. 

In 2023, Japan's data protection law, the Act on Protection of Personal Information (APPI), was amended.  While the 2023 amendments were not as impactful as the 2020 amendments, they do expand the obligations of security measures and data breach reporting requirements companies must take. 

In addition to the 2023 update, the Japanese regulator, the PPC, has started its three-year review process to assess and identify potential amendments to the APPI.

The PPC has also remained relatively active, although there have been no significant penalties to date.

In addition, regulations on AI are being actively discussed in Japan, and guidelines will be issued in early 2024. The current government is active in developing regulations for AI, and it is possible that more AI regulations will be issued in the near future.