Japan's Act on the Protection of Personal Information (APPI, 個人情報保護法) is not just for large companies: any business that keeps customer or employee data must take care of it.
This article is for information only and is not legal advice. For legal questions, consult the Personal Information Protection Commission (PPC) or a lawyer.
What the law asks, in plain language
- State what you use the data for and use it only for that.
- Protect the data with appropriate organizational and technical measures.
- Supervise staff and vendors who handle the data.
- Take care when sharing data with third parties, including abroad.
- Respond to requests from people about their own data.
- For certain leaks, notify the PPC and the people affected.
IT measures that help
- Know where the data is (spreadsheets, email, systems, paper).
- Access only for those who need it, with one account per person.
- Two-step verification and strong passwords.
- Updated computers, with antivirus and encrypted disks.
- Backup with a protected copy.
- Delete what is no longer needed.
- An incident plan: who does what if there is a leak.
How KGA IT helps
- Security assessment: from ¥15,000.
- Digital consulting: from ¥30,000.
- Backup setup: from ¥8,000.
- System management: from ¥10,000/month.
Prices include tax. See the pricing page. KGA IT is based in Kosai, Shizuoka, and works in 9 languages.
Contact KGA IT
The consultation is free with no obligation. Reach us through the contact page, LINE or WhatsApp.