Jurisdiction-specific data protection, defamation law, and removal process information for Japan. Last reviewed 2025.
Personal Information Protection Commission (PPC) is the supervisory authority for data protection in Japan. Individuals can file erasure and data-related complaints directly with this authority.
Act on the Protection of Personal Information (APPI), significantly amended in 2020 (effective April 2022); Provider Liability Limitation Act (PLLA), amended 2022
Japan's amended APPI introduced new individual rights, including the right to request cessation of use or deletion of personal data in certain circumstances. The PPC enforces the law and can order businesses to rectify compliance failures. Japan's APPI is broadly aligned with GDPR but has important distinctions around consent and data use.
Japan's Defamation Law is set out in the Civil and Penal Codes (Articles 230-232 Penal Code). Criminal defamation exists alongside civil remedies. Defamation of the deceased (up to five years) is also criminalised. The amended PLLA (2022) created a streamlined procedure for identifying anonymous defamers online.
The amended PLLA (2022) created a single-stage court procedure for identifying anonymous online defamers â replacing a previously slow two-stage process. Courts can issue provisional dispositions (kari sashitome) â interim removal orders â within days in urgent cases. The PPC investigates APPI complaints.
Common Japanese sources requiring removal include Nikkei, Mainichi Shimbun, Yomiuri Shimbun, Asahi Shimbun, NHK News Web, Yahoo! Japan News, note.com, and 5ch (major anonymous forum).
Japan's amended PLLA dramatically simplified identifying anonymous online defamers â now a single court procedure rather than two separate steps. This makes Japan one of the more effective jurisdictions for pursuing anonymous online attackers, once a case reaches the courts.