Japan APPI and Generative AI

Japan’s APPI is the existing statutory framework for personal information and personal data. Generative AI does not suspend its requirements: relevant processing may occur in source collection, model training, fine-tuning, prompts, logs, retrieval stores and outputs. A business must identify purposes, use personal information within the permitted scope, handle security, and comply with rules for sensitive information and third-party provision. Whether a model provider is a processor or an independent recipient depends on the actual service arrangement and data use, not merely the provider’s label. In June 2023, the Personal Information Protection Commission (PPC) issued a caution for businesses, public bodies and individuals using generative AI. For businesses entering personal information in prompts, it advised checking that use is necessary for the specified purpose. Where a prompt contains personal data that the AI provider will use for purposes beyond generating the response, such as model training, the business may violate APPI without the required basis or consent; the PPC therefore told users to confirm whether provider reuse is disabled. The Commission separately highlighted restrictions on acquiring special-care-required personal information, subject to statutory exceptions. This caution is regulator guidance, not a new AI-specific statute. Japan promulgated an APPI amendment law on July 17, 2026. It provides for a future consent exception for certain third-party provision or acquisition of publicly available sensitive data when used only for statistical creation, including AI development that qualifies as statistical processing. It also creates other safeguards and enforcement measures. The amendment’s main provisions are to commence on a date set by Cabinet order within two years of promulgation; as of September 26, 2026, PPC materials still showed rulemaking and commencement preparation. The new route should not be treated as current law. Existing APPI rules and PPC’s current guidance continue to govern until the applicable commencement date.