Japan

Guideline for Japanese Government Procurement and Use of Generative AI, Version 2.0

Guidance on Civil Liability in the Utilization and Application of AI

AI Guidelines for Business, Version 1.2

The Ministry of Economy, Trade and Industry and partner agencies updated Japan's voluntary guidance for organisations that develop, provide, or use AI. Version 1.2 consolidates current governance expectations while preserving the guidance's risk-based, non-statutory character.

Guidelines on Roles Expected of Cyber Infrastructure Providers under Basic Act on Cybersecurity

On 31 March 2026, the Ministry of Economy, Trade and Industry (METI) and the National Cybersecurity Office (NCO) released guidelines on the roles expected of cyber infrastructure providers. The guidelines were developed by the Study Group on the Roles Required of Cyber Infrastructure Providers. This group operates as a joint working group under the Cross-Sectoral Sub-working Group and the Critical Infrastructure Expert Examination Committee of the Cybersecurity Strategy Headquarters, within t...

Telecommunications Business Policy Subcommittee assessment of security obligations under Universal Telecommunications and Broadband Services Subsidy Scheme

On 24 February 2026, the Telecommunications Business Policy Subcommittee of the Information and Communications Council closes the consultation on the second report (draft) on the basic telecommunications service system following the introduction of the ultimate security obligation – subsidy system for universal telecommunications and broadband services from FY2025 onwards. The consultation follows the introduction of the security obligation under the Act partially amending the Telecommunicati...

Guidelines for Ensuring the Appropriate Research, Development and Use of Artificial Intelligence Technologies

Measures regulating use of non-public data in Act on Promoting Competition Regarding Specific Software Used in Smartphones

On 18 December 2025, the Act on Promoting Competition Regarding Specific Software Used in Smartphones entered into force. The Act prohibits designated business operators from using non-public data obtained through basic operating software, app stores, or browsers in order to obtain a competitive advantage against other individual application businesses. Furthermore, the Act outlines requirements for the handling and protection of user data by designated business operators, aiming to safeguard...

Artificial Intelligence Basic Plan under AI Act

On 12 September 2025, the Artificial Intelligence Strategy Headquarters, established under the Artificial Intelligence Act that took full effect on 1 September 2025, held its first meeting at the Prime Minister’s Office. The meeting focused on the operation of the Headquarters and the development of an Artificial Intelligence Basic Plan structured around four policy areas. The first area, “Using AI,” addressed the application of AI in sectors such as elderly care, including nursing robots and...

Guidelines for procurement and utilisation of generative artificial intelligence in public administration

On 11 April 2025, the Digital Agency of the Japanese Government closes its public consultation on draft guidelines for the procurement and utilisation of generative artificial intelligence (AI) technologies within governmental operations. The guidelines aim to facilitate AI adoption while addressing associated risks, with a focus on innovation and efficiency in public administration.

United States and Japan memorandum of cooperation regarding Technology Prosperity Deal

On 28 October 2025, the Governments of the United States and Japan signed a Memorandum of Cooperation (MOC) in Tokyo under the Technology Prosperity Deal. The MOC establishes collaboration in science and technology across several areas, including artificial intelligence (AI) frameworks, the enforcement of protection measures, export promotion, industry standards, and digital well-being. It encompasses high-performance computing, semiconductor and quantum technologies, as well as research, sec...

Minister of State for Intellectual Property Strategy released statement on OpenAI's Sora2 compliance with copyright protection regulations

On 10 October 2025, Japan's Minister of State for Intellectual Property Strategy released a statement on OpenAI's Sora2 compliance with copyright protection regulations. Sora 2 is OpenAI's art video and audio generation model. The assessment followed concerns that the Artificial Intelligence (AI) was generating videos closely resembling popular anime. It was stated that OpenAI plans an opt-out system for rights holders, greater transparency of training data, and stronger content filters. It was

Guidelines on provision to foreign third parties integrating Global CBPR System

On 8 October 2025, the Personal Information Protection Commission (PPC) will promulgate and implement revisions to the guidelines on the Act on the Protection of Personal Information concerning the Provision of Personal Data to a Foreign Third Party. The amendments incorporate explicit references to both the APEC Cross-Border Privacy Rules (CBPR) System and the newly established Global CBPR System as recognised frameworks ensuring adequate safeguards for cross-border data transfers. The revis...

Ministry of Internal Affairs and Communications order designating Pinterest, CyberAgent, Shonan Seibu Home Co, and Dwango as large-scale specified telecommunications service providers

On 30 August 2025, Pinterest Europe Ltd., CyberAgent, Inc., Shonan Seibu Home Co., Ltd., and Dwango Co., Ltd. are required to submit a notification to the Ministry of Internal Affairs and Communications (MIC) in accordance with Article 21(1) of the Information Distribution Platform Regulation Act. The notification must include the provider’s name and address, and, in the case of foreign entities, the name and address of their representative or agent in Japan. The notification is required with...

Personal Information Protection Commission surveys on artificial intelligence, emerging technologies, and personal information protection

On 29 August 2025, the Personal Information Protection Commission (PPC) announced in its Fiscal Year 2026 Budget Request and Priority Measures that it will conduct surveys on artificial intelligence (AI) and other emerging technologies in relation to personal information protection. The PPC indicated that it will monitor domestic and international developments, carry out fact-finding surveys on the use of these technologies, and assess potential risks to personal rights and interests. The fin...

Personal Information Protection Commission inquiry into current status of personal information and personal data security measures implemented at small and medium sized businesses

On 25 August 2025, the Personal Information Protection Commission announced an inquiry to assess how small and medium-sized businesses are managing the security of personal information and data. The inquiry targets 17’000 randomly selected companies across various industries. The findings will identify current practices and guide future policy measures.

Ministry of Internal Affairs and Communications designating platforms as large specified telecommunications service providers under Information Distribution Platform Regulation Act

On 30 July 2025, Google LLC, LINE Yahoo Corporation, Meta Platforms, TikTok, and X Corp. are required to submit a notification to the Ministry of Internal Affairs and Communications (MIC), in accordance with Article 21(1) of the Information Distribution Platform Regulation Act. The notification must include the provider’s name and address, and, in the case of foreign entities, the name and address of their representative or agent in Japan. The notification is required within three months from...

Japan Fair Trade Commission guide on development and operation of effective Antimonopoly Act compliance programs

On 20 June 2025, the Japan Fair Trade Commission (JFTC) released the results of a fact-finding survey on the development and operation of Antimonopoly Act compliance programs in companies, along with a revised version of the guide to the development and operation of effective Antimonopoly Act compliance programs. The survey, conducted for the first time since 2012, targeted Tokyo Stock Exchange Prime Market-listed companies and examined the status of establishing and operating compliance fram...

UK-Japan joint statement on data adequacy

On 23 April 2025, Japan’s Personal Information Protection Commission and the United Kingdom’s Department for Science, Innovation and Technology signed a joint statement reaffirming their commitment to promoting free data flows with high standards of protection under the Data Free Flow with Trust (DFFT) framework. The arrangement expands the scope of the Japan-UK data adequacy agreement, enhancing protections to cover academia and the public sector. The expansion builds on Japan's 2021 data pr...

Act on Promotion of Research and Development and Application of Artificial Intelligence-Related Technologies entered into force excepting certain provisions

On 4 June 2025, the Act on the Promotion of Research and Development and Application of Artificial Intelligence-Related Technologies entered into force, with the exception of the provisions of Chapter 3, Chapter 4, and Supplementary Provisions Article 3, and Article 4. The excepted provisions will enter into force on a date to be determined by government ordinance within three months from the date of promulgation. The Act establishes a national framework for AI development, defining AI-related t

Japan Financial Services Agency source on artificial intelligence governance (2025)

Official source record dated 2025-04-03 for JP concerning Financial Services Agency outline on promoting responsible use of Artificial Intelligence in financial sector. See the linked fsa.go.jp source for the authoritative text, procedural context, and implementation details.

Content moderation regulation in Act on Measures against Infringement of Rights through the Distribution of Information by Specified Telecommunications (Act No. 25 of Reiwa 6)

On 1 April 2025, amendments to the Act on Measures against Infringement of Rights through the Distribution of Information by Specified Telecommunications (Act No. 137 of 2001, as amended by Act No. 25 of 2024) entered into force. The 2024 amendment changed the Law’s title from the Act on the Limitation of Liability for Damages of Specified Telecommunications Service Providers and the Right to Demand Disclosure of Identification Information of the Sender. The amendment introduces binding oblig...

Ministry of Internal Affairs and Communications and Ministry of Economy, Trade and Industry AI Guidelines for Business

On 28 March 2025, the Ministry of Internal Affairs and Communications and the Ministry of Economy, Trade and Industry released the AI Guidelines for Business (Version 1.1). The guidelines establish a framework to promote the safe and secure use of artificial intelligence (AI) technologies in development, provision, and business use. They are structured into 3 main parts: foundational principles, risk-based considerations, and role-specific actions for AI developers, providers, and business us...

Act on Development of Related Laws Accompanying Enforcement of Act on Prevention of Damage Caused by Wrongful Acts against Important Computers (Law No. 43 of 2025)

On 18 March 2025, the Bill on the Development of the Cyber ​​Response Capability Strengthening Act was passed by the Japanese House of Representatives. The Bill establishes the roles of the Cabinet Cyber Officer and the Cyber Communications Information Supervisory Commission, an independent body overseeing specific cybersecurity activities. Changes to the Police Duties Execution Act grant specialised cybersecurity officers the authority to take preventive measures against cyber threats. They...

Act on Prevention of Damage Caused by Wrongful Acts against Important Computers (Law No. 42 of 2025)

On 18 March 2025, the Bill on preventing damage caused by unauthorised acts against important computers (Cyber Security Capability Enhancement Bill) was passed by the Japanese House of Representatives. The Act would introduce cybersecurity measures for critical electronic infrastructures by establishing frameworks for reporting specific incidents and regulating the collection and analysis of related communication information. The Act further outlines the roles of the Cyber Communications Info...

Ministry of Economy, Trade and Industry adopted report on advancing autonomous delivery robots

On 26 February 2025, the Ministry of Economy, Trade and Industry (METI) presented a report on the social implementation of autonomous delivery robots to address logistics labour shortages. Since July 2024, a working group involving experts and businesses has explored use cases, industry needs, and a roadmap for deploying larger, faster robots. Following the 2024 amendment to the Road Traffic Act allowing low-speed, small robots on public roads, METI's report focuses on specifications for medium-

Ministry of Economy, Trade and Industry Contract Checklist for Use and Development of AI

On 18 February 2025, Japan's Ministry of Economy, Trade and Industry (METI) published a Checklist of Contracts Concerning the Use and Development of AI, aimed at facilitating the practical use of AI across sectors. It provides a checklist to help ensure compliance with regulations, manage risks, and protect intellectual property and personal data. The guide covers various scenarios, including general AI service usage, customisation, and new development, emphasising the importance of thorough ...

Ministry of Economy, Trade and Industry manual on cross-border Industrial data management

On 27 January 2025, the Ministry of Economy, Trade and Industry (METI) adopted the manual on cross-border Industrial data management. The manual provides guidance for companies on managing risks associated with international data sharing and utilisation, focusing on non-personal data. It outlines a three-step process for cross-border data management, including risk visualisation, assessment, and implementation of measures. It aims to strengthen industrial competitiveness and facilitate the es...

UK-Japan Digital Partnership Ministerial Digital Council

On 23 January 2023, Japan and the United Kingdom issued a Joint Statement regarding the Third Ministerial Japan-UK Digital Council meeting. The Joint Statement highlights progress across the 4 pillars of the Partnership agreement and set the strategic direction for the next phase of the UK-Japan Digital Partnership. Key highlights included advancements in digital infrastructure, such as collaboration on semiconductors and AI safety, strengthened ties in telecom diversification, and shared eff...

Japan and Thailand Memorandum of Understanding on information communications and digital technology

On 17 January 2025, Japan and Thailand announced expansion of Memorandum of Understanding on information communications and digital technology. Thailand’s Ministry of Digital Economy and Japan’s Ministry of Internal Affairs and Communications highlighted potential new areas of collaboration, including 3D printing and artificial intelligence. They also highlighted support for start-ups in gaming and entertainment, and digital skills development. Thailand highlighted its readiness to serve as a...

United States-Japan-Republic of Korea joint statement on public-private collaborations in response to cryptocurrency thefts by the Democratic People's Republic of Korea

On 14 January 2025, the governments of Japan, the United States, and South Korea issued a joint statement on North Korea's (DPRK) theft of cryptocurrencies and the necessity for public-private collaboration in response, highlighting the DPRK's use of cyberattacks to fund its weapons programs. The statement detailed significant thefts attributed to DPRK cyber groups, including Lazarus, which targeted cryptocurrency exchanges and digital assets, stealing over USD 659 million in 2024. The countr...

Enforcement Regulations of the Act dealing with Infringement of Rights caused by the Distribution of Information by Specific Telecommunications

On 1 April 2025, the Japanese Ministry of Internal Affairs and Communications (MIC) issued an updated Ordinance enforcing the Provider Liability Limitation Act. The Ordinance details procedures for identifying senders of infringing content via specified telecommunications. It lists specific data categories subject to disclosure, including IP address, SIM identifiers, and related timestamps. The Ordinance also mandates public transparency from large-scale service providers regarding their enfo...

Bill to balance the acceleration of AI innovation with risk responses

On 26 December 2024, the Prime Minister's Office of Japan announced the intention to introduce the Artificial Intelligence (AI) Bill to balance the acceleration of AI innovation with risk responses in the next legislative section, which starts in January 2025. The Bill aims to address the regulatory framework for the use and development of artificial intelligence in Japan, with a focus on ensuring ethical standards and promoting innovation. The Bill is expected to guide the responsible deploy...

PPC guidance on protection of personal data in cloud-based human resources management systems

On 17 December 2024, the Personal Information Protection Commission issued a cautionary alert for cloud-based HR and labor management services (HRMS) following a data breach incident. The alert was issued in response to a data breach incident involving a cloud HRMS provider, in which sensitive personal data, including MyNumber IDs and financial information, was compromised due to security misconfigurations. The alert directs contractors to implement security measures from the development phas...

JFTC investigation into Amazon for allegedly restricting the business activities of sellers by requiring competitive prices and compelling sellers to use FBA

On 27 November 2024, the Japan Fair Trade Commission (JFTC) launched an investigation into Amazon over alleged violations of the Antimonopoly Act. The investigation focuses on Amazon’s restrictive practices where the company is suspected of requiring sellers to set "competitive prices" to qualify for the "Recommended Listings" feature and pressing them to use the "Fulfillment by Amazon" (FBA) service. The JFTC claims these practices may unfairly restrict sellers' business activities. The JFTC...

JFTC Inquiry on Generative AI Market Dynamics and Competition

On 22 November 2024, the Japan Fair Trade Commission (JFTC) closed its public consultation on the rapidly evolving market of generative Artificial Intelligence (AI) and on its discussion paper on Generative AI and Competition. According to the discussion paper, generative AI markets consist of three layers: infrastructure, models, and applications. The infrastructure layer includes computing resources (especially GPUs), data, and expertise. The model layer focuses on the development of genera...

Partial Amendment of Review Standards related to Telecommunications Business Act

On 11 November 2024, the Ministry of Internal Affairs and Communications closes its public consultation on the draft ordinance for the Partial Amendment of Review Standards related to the Telecommunications Business Act. The revision aims to improve the Universal Service System for broadband services, particularly in light of the upcoming applications for Type II certified telecommunications carriers. Furthermore, the proposed changes aim to ensure proper designation and maintenance of these ...

AISI guide on evaluation perspectives in Artificial Intelligence safety

On 25 September 2024, the AI Safety Institute of Japan (AISI) adopted the guide on evaluation perspectives in Artificial Intelligence safety. The guide applies to organisations involved in the development and provision of AI systems. The guide emphasises key elements for AI safety evaluations, including human centricity, safety, fairness, privacy protection, ensuring security, and transparency. The guide's evaluations on AI Safety focus on determining the suitability of AI systems, particular...

PPC Guidance on Proper Handling of Sensitive Personal Data in Healthcare

On 25 September 2024, the Personal Information Protection Commission issued a caution notice to hospitals, clinics, and pharmacies across Japan, emphasising the importance of proper handling of personal and sensitive personal data. This action follows a series of leakage incidents, which, according to the regulator, highlighted the need for enhanced safety management measures in accordance with the Act on the Protection of Personal Information. The notice outlines key points for preventing le...