On August 2, the Personal Information Protection Commission released (source document in Japanese) a draft cabinet order and a draft enforcement regulation for public comments. The draft cabinet order defines the term "Individual Identification Code" as one category of personal information and lists DNA data, finger or palm print data, passport number, or basic pension code as Individual Identification Codes. The draft regulation provides rules for creating and using De-Identified Information and safeguards for extraterritorial data transfer. Public comments are due on August 31.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.