the fields of social security, tax, and disaster response. The My Number Act sets
forth special protections for information associated with My Numbers.
Additionally, more than 2000 local governments and municipalities have their
own ordinances for personal data protection.
Figure 1 illustrates the legal framework for personal data protection in Japan.
Regarding the leakage of personal data, there have been court decisions that
permit tort liability claims against Business Operators for negligence in information
management (see Sect. 3.5). The Supreme Court has ruled that “common information for personal identification” such as student ID numbers, addresses, names,
telephone numbers, etc. is also “subject to legal protection and unauthorized disclosure could be illegal” (Waseda University case
3 ).
2.2 Notion of Personal Data
Article 2 of the APPI classifies personal information into three main categories:
(1) personal information (general information that can identify specific individuals);
Fig. 1 Legal framework in Japan (Source: The Personal Information Protection Commission,
“Current Legal Framework of the Protection of Personal Information”, http://www.ppc.go.jp/en/
legal/)
3 Saiko Saibansho [Sup. Ct.], Sep. 12, 2003, 1823 Hanji 3 (Japan).
Data Protection in the Internet: Japanese National Report
255
forth special protections for information associated with My Numbers.
Additionally, more than 2000 local governments and municipalities have their
own ordinances for personal data protection.
Figure 1 illustrates the legal framework for personal data protection in Japan.
Regarding the leakage of personal data, there have been court decisions that
permit tort liability claims against Business Operators for negligence in information
management (see Sect. 3.5). The Supreme Court has ruled that “common information for personal identification” such as student ID numbers, addresses, names,
telephone numbers, etc. is also “subject to legal protection and unauthorized disclosure could be illegal” (Waseda University case
3 ).
2.2 Notion of Personal Data
Article 2 of the APPI classifies personal information into three main categories:
(1) personal information (general information that can identify specific individuals);
Fig. 1 Legal framework in Japan (Source: The Personal Information Protection Commission,
“Current Legal Framework of the Protection of Personal Information”, http://www.ppc.go.jp/en/
legal/)
3 Saiko Saibansho [Sup. Ct.], Sep. 12, 2003, 1823 Hanji 3 (Japan).
Data Protection in the Internet: Japanese National Report
255