This paper examines the relationship between Act on the Protection of Personal Information and various business laws, with the Telecommunications Business Act, which was revised in June 2022, as the subject of the study.
 First, the contents of the revised Telecommunications Business Act as it relates to the provisions of Act on the Protection of Personal Information are explained.
 Next, the relationship between the new regulations under the revised Telecommunications Business Act and Act on the Protection of Personal Information will be analyzed and summarized.
 Finally, the relationship between the regulations of Act on the Protection of Personal Information in the private sector and various business laws in general will also be discussed.

View full abstract

Regarding the relationship between the Act on the Protection of Personal Information and privacy, (1) the Act on the Protection of Personal Information includes the protection of privacy as its purpose, but it is not the only one, and (2) in the question of whether the substance of the invasion of privacy is questioned in a violation of the Act on the Protection of Personal Information, if there is a substantial invasion of privacy, it may be considered as a violation of the Act on the Protection of Personal Information (2-1), which is derived from the interpretation of the purpose provision and the prohibition of inappropriate use provision. As controversial points, there are the issues of whether a violation of the Act on the Protection of Personal Information is not a violation of the Act when there is no substantial invasion of privacy (2-2), whether a violation of the Act constitutes an invasion of privacy (3), and (3) can be further broken down into the question of whether a violation of the Act on the Protection of Personal Information constitutes an invasion of privacy (3-1) and whether a lawful act under the Act on the Protection of Personal Information can also prevent the violation of privacy (3-2). In a series of cases involving the submission of evidence of a list of discipline requesting parties, there have been judgments that a violation of the Act on the Protection of Personal Information is not a violation if there is no substantial invasion of privacy (2-2), and there have been a number of cases concerning 3-1 and 3-2.

View full abstract

Verfassungsrechte sowie deren “Schranken-Schranken” werden durch verschiedene Prozesse und Formen systematisiert. Deshalb ist auch in dem japanischen Datenschutzrecht ohne Erörterung über Relevanz mit Verfassung solche Relevanz zu finden, indem man dessen solche Relevanz mit Grundrechten oder japanische Rechtsprechungen sieht. Das japanische Gesetz wurde in Richtung auf Datennutzungen geändert und die japanische Datenschutzkommision zeigt Meinungen für solche Datennutzungen. Obwohl auch DS-GVO mit der unmittelbaren Wirkung in Mitgliedstaaten den freien Datenverkehr in der EU als ein Ziel der Rechtssetzung nennt, verstehen demgegenüber Erwägungsgründe der DS-GVO, Entscheidungen des EuGH und deutsche überwiegende Literaturen den Datenschutz als der wichtigste Zweck der DS-GVO. Dies gilt für Rollen der Datenschutzbeauftragten der EU genauso. In der EU sowie Deutschland ist der freie Datenverkehr in der EU als solches mit Bezug auf Rechtssystem der EU verankert. Dies kann be deuten, dass es zwischen Japan und Deutschland, die Meinungen über “Nützlichkeit oder Benutzungen” sowie “der freie Datenverkehr” unterschiedlich ist. Es ist weiter zu denken, was der solche zurückhaltende Ausdruck in dem japanischen Datenschutzgesetz wie “unter Berücksichtigung” der Nützlichkeit der Daten bedeutet.

View full abstract

In the first half of this series of papers, we have analyzed past legislative history to clarify the interpretation of the phrases “any information related to an individual”, “can be easily matched with other information” and “can identify an individual” in the Japanese Personal Information Protection Law, and to presume the proper interpretation of the definition of “personal information”.
 In the latter part of the series, we will clarify what the purpose of his law is and what is envisioned in the “rights and interests of individuals” by examining the literature of the past 50 years in Western countries, prove that the presumed interpretation is reasonable, and discuss how the Japanese Personal Information Protection Law should be revised.

View full abstract

　The Personal Information Protection Commission, as the administrative organization that is responsible for the protection of personal information in Japan, plays an important role not only in the implementation of policies related to the protection of personal information but also as a “command post” in charge of planning and formulating such policies (I). This paper traces its position and duties (II), jurisdiction over laws and guidelines (III), supervision and monitoring (IV), and international cooperation (V), and provides some theoretical analysis from the perspective of public law.

View full abstract

Extraterritorial remote access targets foreign servers and items that are not subject to the sovereignty of the home country. Thus it may cause diplomatic disputes if the opposite country raises objections. In this regard, the first ruling on the permissibility of extraterritorial remote access was made by the Supreme Court in Reiwa 3 (2021). Besides, It has a important meaning that the Japanese Supreme Court also proposed the first permissible criteria for extraterritorial remote access through this ruling in 2021. Because discussions on extraterritorial remote access will be continued based on this ruling from now on, it is necessary at this point to examine this ruling in view of current domestic discussions and judicial precedents related to the permissibility of extraterritorial remote access. Furthermore, reviewing the issues addressed in this ruling would also be helpful.

View full abstract