Japan removes consent requirement for AI data use
Japan's government approved amendments to its Personal Information Protection Act on Tuesday that eliminate the need to obtain opt-in consent before using certain personal data. Digital Transformation Minister Hisashi Matsumoto said the changes will position Japan as the easiest country in the world to develop AI applications.
The amendments apply to data that poses minimal risk to individuals' rights, particularly when used for statistical research or public health improvement. Health-related data qualifies for the exemption, as does facial imagery.
What developers need to know
Organizations collecting facial images must disclose how they handle the data, but offering users an opt-out option is not mandatory under the new rules. The changes do not apply to children under 16-parental consent is still required to collect their facial scans.
A "best interests" test will govern use of data describing minors. Organizations face fines equal to profits gained from improper data use, plus penalties for obtaining data through fraud.
Data breaches no longer require notification to affected individuals if the risk of harm is deemed minimal.
Why Japan is making this move
Matsumoto characterized existing privacy protections as "a very big obstacle to the development, and utilization of AI in Japan." Without access to data, the country risks falling behind in AI development and deployment.
Japan has historically lagged in government digitization despite its tech sector reputation. These amendments aim to prevent the country from moving slowly on AI adoption as well.
For developers working on generative AI and LLM projects, understanding these regulatory shifts is essential. Japan's approach differs markedly from privacy-first frameworks in other regions, creating distinct compliance requirements for teams building or deploying AI systems there.
Learn more about AI for IT and development professionals navigating regulatory environments.
Your membership also unlocks:
