FOR COMPANIES

Personal data and data breaches

From the first hours after a breach to everyday compliance. Some steps have deadlines.

Yusuke Abe, attorney
Admitted in Japan and New York · English & Japanese

  • You had, or may have had, a data breach in Japan
  • You need to know whether to report or notify
  • You transfer personal data in or out of Japan

JAPANESE LAW

Three things to know

  1. 01

    Report and notify

    Breaches involving sensitive data or more than 1,000 people, among others, must be reported to the PPC and notified to individuals.

    APPI Art. 26; Enforcement Rules Art. 7

  2. 02

    Two-stage reporting

    A prompt preliminary report, then a final report within 30 days (60 days if caused with an unauthorized purpose).

    APPI Enforcement Rules Art. 8

  3. 03

    Consent to share

    Giving personal data to a third party generally requires the individual’s consent.

    APPI Art. 27(1)

General information as of November 2026. Your situation may differ — please ask us.

HOW WE HELP

What we can do

  • Breach response, reports and notices
  • Privacy policies and cookie consent
  • Outsourcing and cross-border transfer contracts
  • Preparing for the APPI amendment
Yusuke Abe

Yusuke Abe

Representative attorney

  • Admitted in Japan (2018) and New York (2024)
  • Anderson Mori & Tomotsune; Anderson Mori & Tomotsune (Thailand)
  • LL.M., Fordham University · Marshall Suzuki Law Group, San Francisco
  • Fundamentals of M&A Practice, 3rd ed. (Shojihomu, 2025)
About the firm

HOW IT WORKS

Three steps

  1. 01

    Book a time

    Pick a slot online, or send a short note through the form.

  2. 02

    30 minutes, free

    Online or in Otemachi, Tokyo — in English. No need to be in Japan.

  3. 03

    Written estimate first

    Approach and fees in writing. We start only once you agree.

FAQ

Quick answers

Do we need to report a suspected breach?

Reporting can be required where a breach is likely, not only confirmed. Talk to us while you are still assessing.

Can you work with our head office abroad?

Yes. We explain Japanese requirements to your global team in English.

Can you draft the reports in Japanese?

Yes. We prepare the Japanese filings and notices.

CONTACT

Tell us what is happening

The first 30 minutes are free — in Japanese or English, online or in person.

Book a free consultation