{"id":58964,"date":"2023-09-22T12:04:05","date_gmt":"2023-09-22T03:04:05","guid":{"rendered":"https:\/\/monolith.law\/en\/?p=58964"},"modified":"2023-10-19T11:41:56","modified_gmt":"2023-10-19T02:41:56","slug":"privacy-customer-information","status":"publish","type":"post","link":"https:\/\/monolith.law\/en\/general-corporate\/privacy-customer-information","title":{"rendered":"Is Buying Customer Information Legal? Understanding Japanese Act on the Protection of Personal Information"},"content":{"rendered":"\n<p>On May 30, 2017, the Revised Act on the Protection of Personal Information came into full effect in Japan. Now, all businesses that handle personal data fall under the purview of this law, which is commonly referred to as the Japanese Personal Information Protection Law.<\/p>\n\n\n\n<p>The legislation extends its reach to companies that obtain personal information through various means, including the purchase of customer lists. Consequently, anyone responsible for considering the acquisition of customer information must be fully aware of the guidelines, responsibilities, and restrictions associated with the purchase and use of such information.<\/p>\n\n\n\n<p>In this article, we aim to provide a comprehensive overview of the Revised Act on the Protection of Personal Information as it pertains to the buying and utilization of customer information in Japan.<\/p>\n\n\n\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_53 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<span class=\"ez-toc-title-toggle\"><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/monolith.law\/en\/general-corporate\/privacy-customer-information\/#What_is_the_Personal_Information_Protection_Law\" title=\"What is the Personal Information Protection Law?\">What is the Personal Information Protection Law?<\/a><ul class='ez-toc-list-level-3'><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/monolith.law\/en\/general-corporate\/privacy-customer-information\/#Purpose_of_the_Act_on_Protection_of_Personal_Information\" title=\"Purpose of the Act on Protection of Personal Information\">Purpose of the Act on Protection of Personal Information<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/monolith.law\/en\/general-corporate\/privacy-customer-information\/#Definition_of_Personal_Information\" title=\"Definition of Personal Information\">Definition of Personal Information<\/a><ul class='ez-toc-list-level-4'><li class='ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/monolith.law\/en\/general-corporate\/privacy-customer-information\/#What_is_a_Personal_Identification_Code\" title=\"What is a Personal Identification Code?\">What is a Personal Identification Code?<\/a><\/li><\/ul><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/monolith.law\/en\/general-corporate\/privacy-customer-information\/#Is_the_Buying_and_Selling_of_Customer_Information_Legal\" title=\"Is the Buying and Selling of Customer Information Legal?\">Is the Buying and Selling of Customer Information Legal?<\/a><ul class='ez-toc-list-level-3'><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/monolith.law\/en\/general-corporate\/privacy-customer-information\/#Procedures_for_Providing_Personal_Information_to_Third_Parties\" title=\"Procedures for Providing Personal Information to Third Parties\">Procedures for Providing Personal Information to Third Parties<\/a><ul class='ez-toc-list-level-4'><li class='ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/monolith.law\/en\/general-corporate\/privacy-customer-information\/#Obtain_the_Individual%E2%80%99s_Consent_in_Advance_as_a_Principle\" title=\"Obtain the Individual&#8217;s Consent in Advance as a Principle\">Obtain the Individual&#8217;s Consent in Advance as a Principle<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/monolith.law\/en\/general-corporate\/privacy-customer-information\/#Provision_to_Third_Parties_through_Opt-out_Procedures\" title=\"Provision to Third Parties through Opt-out Procedures\">Provision to Third Parties through Opt-out Procedures<\/a><\/li><\/ul><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/monolith.law\/en\/general-corporate\/privacy-customer-information\/#What_to_Consider_When_Purchasing_Customer_Information\" title=\"What to Consider When Purchasing Customer Information\">What to Consider When Purchasing Customer Information<\/a><ul class='ez-toc-list-level-3'><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/monolith.law\/en\/general-corporate\/privacy-customer-information\/#Legal_Obligations\" title=\"Legal Obligations\">Legal Obligations<\/a><ul class='ez-toc-list-level-4'><li class='ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/monolith.law\/en\/general-corporate\/privacy-customer-information\/#When_purchasing_customer_information_you_must_confirm_the_following_two_points\" title=\"When purchasing customer information, you must confirm the following two points:\">When purchasing customer information, you must confirm the following two points:<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/monolith.law\/en\/general-corporate\/privacy-customer-information\/#When_purchasing_customer_information_you_must_record_the_following_items_and_keep_them_for_three_years\" title=\"When purchasing customer information, you must record the following items and keep them for three years:\">When purchasing customer information, you must record the following items and keep them for three years:<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/monolith.law\/en\/general-corporate\/privacy-customer-information\/#Verification_of_Customer_Information_Acquisition\" title=\"Verification of Customer Information Acquisition\">Verification of Customer Information Acquisition<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/monolith.law\/en\/general-corporate\/privacy-customer-information\/#Guidelines_for_Using_Customer_Information\" title=\"Guidelines for Using Customer Information\">Guidelines for Using Customer Information<\/a><ul class='ez-toc-list-level-3'><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/monolith.law\/en\/general-corporate\/privacy-customer-information\/#Do_Not_Exceed_the_Scope_of_the_Intended_Use\" title=\"Do Not Exceed the Scope of the Intended Use\">Do Not Exceed the Scope of the Intended Use<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/monolith.law\/en\/general-corporate\/privacy-customer-information\/#When_Using_for_Sales_Calls\" title=\"When Using for Sales Calls\">When Using for Sales Calls<\/a><ul class='ez-toc-list-level-4'><li class='ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/monolith.law\/en\/general-corporate\/privacy-customer-information\/#Before_soliciting_you_must_inform_the_consumer_of_the_following\" title=\"Before soliciting, you must inform the consumer of the following:\">Before soliciting, you must inform the consumer of the following:<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/monolith.law\/en\/general-corporate\/privacy-customer-information\/#Prohibited_Actions\" title=\"Prohibited Actions\">Prohibited Actions<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/monolith.law\/en\/general-corporate\/privacy-customer-information\/#When_Using_for_Email_Distribution\" title=\"When Using for Email Distribution\">When Using for Email Distribution<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/monolith.law\/en\/general-corporate\/privacy-customer-information\/#Obligation_to_Implement_Security_Measures\" title=\"Obligation to Implement Security Measures\">Obligation to Implement Security Measures<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/monolith.law\/en\/general-corporate\/privacy-customer-information\/#Summary_Understanding_the_Japanese_Act_on_the_Protection_of_Personal_Information_in_Buying_and_Using_Customer_Information\" title=\"Summary: Understanding the Japanese Act on the Protection of Personal Information in Buying and Using Customer Information\">Summary: Understanding the Japanese Act on the Protection of Personal Information in Buying and Using Customer Information<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-22\" href=\"https:\/\/monolith.law\/en\/general-corporate\/privacy-customer-information\/#Introduction_to_Our_Firm%E2%80%99s_Measures\" title=\"Introduction to Our Firm&#8217;s Measures\">Introduction to Our Firm&#8217;s Measures<\/a><\/li><\/ul><\/nav><\/div>\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"What_is_the_Personal_Information_Protection_Law\"><\/span>What is the Personal Information Protection Law?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img decoding=\"async\" src=\"https:\/\/monolith.law\/wp-content\/uploads\/2022\/03\/privacy-customer-information44.jpg\" alt=\"What is the Personal Information Protection Law?\" class=\"wp-image-43566\"\/><\/figure><\/div>\n\n\n<p>The formal name of what is commonly referred to as the Personal Information Protection Law is the &#8220;Japanese Act on the Protection of Personal Information.&#8221; Enacted in 2003, the law has undergone several revisions to adapt to evolving societal changes, such as the digitization of information.<\/p>\n\n\n\n<p>It&#8217;s worth noting that the primary aim of this law is not to restrict the use of personal information. Rather, its main goal is to ensure both the &#8220;protection&#8221; and the &#8220;appropriate utilization&#8221; of such information.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Purpose_of_the_Act_on_Protection_of_Personal_Information\"><\/span>Purpose of the Act on Protection of Personal Information<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<ul>\n<li>To protect individual rights and interests, and to establish rules for the appropriate use of personal information<\/li>\n\n\n\n<li>To define the obligations and penalties of businesses handling personal information<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Definition_of_Personal_Information\"><\/span>Definition of Personal Information<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>The &#8220;personal information&#8221; defined by the Act on Protection of Personal Information refers to information about a living individual that falls under either of the following categories:<\/p>\n\n\n\n<ol>\n<li>Information that can identify a specific individual through the inclusion of their name, date of birth, or other descriptions<\/li>\n\n\n\n<li>Information that includes a personal identification code<\/li>\n<\/ol>\n\n\n\n<h4 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"What_is_a_Personal_Identification_Code\"><\/span>What is a Personal Identification Code?<span class=\"ez-toc-section-end\"><\/span><\/h4>\n\n\n\n<p>A personal identification code is a personality, number, symbol, or other code that can identify a specific individual and falls under either of the following categories, as individually specified by government ordinances and regulations:<\/p>\n\n\n\n<ul>\n<li>Codes converted for computer use from physical attributes (DNA, face, iris, voice print, gait, finger veins, fingerprints, palm prints, etc.)<\/li>\n\n\n\n<li>Codes assigned to each subject in service use or documents (passport number, basic pension number, driver&#8217;s license number, resident&#8217;s card code, My Number, various insurance certificates, etc.)<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Is_the_Buying_and_Selling_of_Customer_Information_Legal\"><\/span>Is the Buying and Selling of Customer Information Legal?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>For general businesses, excluding government agencies and public organizations, the buying and selling of customer information is not illegal as long as they comply with the Japanese Act on Protection of Personal Information.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Procedures_for_Providing_Personal_Information_to_Third_Parties\"><\/span>Procedures for Providing Personal Information to Third Parties<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>When a business provides a database of personal information to a third party, the following procedures are required.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Obtain_the_Individual%E2%80%99s_Consent_in_Advance_as_a_Principle\"><\/span>Obtain the Individual&#8217;s Consent in Advance as a Principle<span class=\"ez-toc-section-end\"><\/span><\/h4>\n\n\n\n<p>However, there are exceptions in the following cases:<\/p>\n\n\n\n<p>\u2460 When it is based on laws and regulations<br>\u2461 When it is difficult to obtain the individual&#8217;s consent and it is necessary for the protection of human life, body, property, public health, or the healthy upbringing of children<br>\u2462 When cooperating with national or local public bodies<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Provision_to_Third_Parties_through_Opt-out_Procedures\"><\/span>Provision to Third Parties through Opt-out Procedures<span class=\"ez-toc-section-end\"><\/span><\/h4>\n\n\n\n<p>If a business has a policy of stopping the provision of personal information to third parties (opting out) at the request of the individual, it is possible to provide the information to third parties without the individual&#8217;s consent through the following procedures:<\/p>\n\n\n\n<p>Notify the individual in advance of the following \u2460 to \u2464, or make it easily known to the individual on a webpage or similar, and report it to the Personal Information Protection Commission.<\/p>\n\n\n\n<p>\u2460 The purpose of providing to third parties.<br>\u2461 The items of personal data to be provided to third parties<br>\u2462 The method of providing to third parties<br>\u2463 The fact that the provision of personal data to third parties will be stopped at the request of the individual.<br>\u2464 The method of accepting requests from the individual<\/p>\n\n\n\n<p>It should be cautious that for &#8220;Sensitive Personal Information&#8221;, such as race, creed, social status, medical history, and criminal record, which may lead to unfair discrimination or prejudice if known to others, the principle of providing to third parties is only with the prior consent of the individual.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"What_to_Consider_When_Purchasing_Customer_Information\"><\/span>What to Consider When Purchasing Customer Information<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img decoding=\"async\" src=\"https:\/\/monolith.law\/wp-content\/uploads\/2022\/03\/privacy-customer-information2.jpg\" alt=\"What to Consider When Purchasing Customer Information\" class=\"wp-image-43562\"\/><\/figure><\/div>\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Legal_Obligations\"><\/span>Legal Obligations<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>When you purchase customer information, you become a &#8220;personal information handler&#8221; and are legally obligated to follow certain rules when receiving personal information from third parties such as list brokers.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"When_purchasing_customer_information_you_must_confirm_the_following_two_points\"><\/span>When purchasing customer information, you must confirm the following two points:<span class=\"ez-toc-section-end\"><\/span><\/h4>\n\n\n\n<ul>\n<li>Name, address, and representative of the list broker<\/li>\n\n\n\n<li>The circumstances under which the list broker obtained the personal information<\/li>\n<\/ul>\n\n\n\n<h4 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"When_purchasing_customer_information_you_must_record_the_following_items_and_keep_them_for_three_years\"><\/span>When purchasing customer information, you must record the following items and keep them for three years:<span class=\"ez-toc-section-end\"><\/span><\/h4>\n\n\n\n<ul>\n<li>The date you received the personal information<\/li>\n\n\n\n<li>Name, address, and representative of the list broker<\/li>\n\n\n\n<li>The circumstances under which the list broker obtained the personal information<\/li>\n\n\n\n<li>The name and other sufficient information to identify the individual identified by the personal information<\/li>\n\n\n\n<li>The items of the personal information<\/li>\n\n\n\n<li>If the information is provided to a third party through an opt-out procedure, the necessary items have been published by the Personal Information Protection Commission (Japanese Personal Information Protection Commission).<\/li>\n<\/ul>\n\n\n\n<p>\u203bYou can check the opt-out procedure notification on the <a href=\"https:\/\/www.ppc.go.jp\/personalinfo\/preparation\/optout\/publication\/\" target=\"_blank\" rel=\"noreferrer noopener\">Personal Information Protection Commission&#8217;s website<\/a>.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Verification_of_Customer_Information_Acquisition\"><\/span>Verification of Customer Information Acquisition<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>When purchasing customer information, it is also necessary to verify the information acquisition methods of list brokers. Even if you legally purchase customer information, if the method of obtaining the customer information is illegal, you may be subject to a claim for damages.<\/p>\n\n\n\n<p>It is of course illegal for list brokers to obtain customer information by fraudulent means, but there are also the following obligations when obtaining information, so be sure to check before purchasing.<\/p>\n\n\n\n<ul>\n<li>Whether the purpose of use is specifically identified<\/li>\n\n\n\n<li>Whether the identified purpose of use has been announced or notified to the individual<\/li>\n\n\n\n<li>Whether consent has been obtained from the individual when using the obtained personal information for other purposes<\/li>\n\n\n\n<li>When receiving personal information from a third party, in addition to the provider&#8217;s name and address, check the circumstances under which the personal information was obtained, record the date of receipt, confirmation items, etc., and keep them for three years<\/li>\n\n\n\n<li>Whether it includes &#8220;personal information requiring special care&#8221; for which the individual&#8217;s consent is always necessary<\/li>\n<\/ul>\n\n\n\n<p>If you want to know more about personal information leakage and damage compensation, please see the detailed description below in conjunction with this article.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Guidelines_for_Using_Customer_Information\"><\/span>Guidelines for Using Customer Information<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Do_Not_Exceed_the_Scope_of_the_Intended_Use\"><\/span>Do Not Exceed the Scope of the Intended Use<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>It is prohibited by law for list brokers and others to use customer information beyond the scope of the purpose for which they obtained the individual&#8217;s consent. Therefore, if you wish to use the information for a different purpose, you must obtain the individual&#8217;s consent again.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"When_Using_for_Sales_Calls\"><\/span>When Using for Sales Calls<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>When conducting &#8220;telephone solicitation sales,&#8221; which involve making phone calls to solicit product orders or conclude sales contracts, there are regulations stipulated by the Japanese Act on Specified Commercial Transactions as follows:<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Before_soliciting_you_must_inform_the_consumer_of_the_following\"><\/span>Before soliciting, you must inform the consumer of the following:<span class=\"ez-toc-section-end\"><\/span><\/h4>\n\n\n\n<ul>\n<li>Company name<\/li>\n\n\n\n<li>Name of the person in charge (the one who will be soliciting)<\/li>\n\n\n\n<li>Type of product (rights, services) to be sold<\/li>\n\n\n\n<li>The purpose is to solicit a contract<\/li>\n<\/ul>\n\n\n\n<h4 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Prohibited_Actions\"><\/span>Prohibited Actions<span class=\"ez-toc-section-end\"><\/span><\/h4>\n\n\n\n<ul>\n<li>Re-soliciting someone who has already declined<\/li>\n\n\n\n<li>Giving explanations that differ from the truth<\/li>\n\n\n\n<li>Intentionally not conveying the truth<\/li>\n\n\n\n<li>Intimidating or confusing the other party<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"When_Using_for_Email_Distribution\"><\/span>When Using for Email Distribution<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>When sending emails for advertising or promotion, the Japanese Act on Regulation of Transmission of Specified Electronic Mail prohibits sending to anyone other than those who have notified the sender that they \u2460 wish to receive specified electronic mail, or \u2461 agree to the sending.<\/p>\n\n\n\n<p>Even if list brokers and others have obtained the above notifications \u2460 and \u2461, the purchaser of the list must obtain new notifications \u2460 and \u2461, making email use difficult.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Obligation_to_Implement_Security_Measures\"><\/span>Obligation to Implement Security Measures<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>When you obtain customer information, you are obligated as a personal information handling business operator to take necessary measures to prevent leakage, loss, or damage of personal information.<\/p>\n\n\n\n<p>Furthermore, you must supervise employees who actually handle personal information in a necessary and appropriate manner to ensure the safe management of such information.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Summary_Understanding_the_Japanese_Act_on_the_Protection_of_Personal_Information_in_Buying_and_Using_Customer_Information\"><\/span>Summary: Understanding the Japanese Act on the Protection of Personal Information in Buying and Using Customer Information<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img decoding=\"async\" src=\"https:\/\/monolith.law\/wp-content\/uploads\/2022\/03\/privacy-customer-information3.jpg\" alt=\"Is it legal to purchase customer information?\" class=\"wp-image-43563\"\/><\/figure><\/div>\n\n\n<p>In this article, we have discussed the relationship between the purchase of customer information and Japanese Act on the Protection of Personal Information, divided into the following four sections:<\/p>\n\n\n\n<ol>\n<li>What is the Japanese Act on the Protection of Personal Information?<\/li>\n\n\n\n<li>Is it legal to buy and sell customer information?<\/li>\n\n\n\n<li>What to consider when purchasing customer information<\/li>\n\n\n\n<li>What to consider when using customer information<\/li>\n<\/ol>\n\n\n\n<p>However, when dealing with consumers overseas through the internet or other means, it is necessary to check not only domestic laws but also the laws and regulations of each country.<\/p>\n\n\n\n<p>Therefore, if you are considering purchasing or using customer information, we recommend that you consult with a lawyer who has extensive knowledge and experience in this field, rather than making a decision on your own.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Introduction_to_Our_Firm%E2%80%99s_Measures\"><\/span>Introduction to Our Firm&#8217;s Measures<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>Monolith Law Office is a legal office with high expertise in both IT, particularly the internet, and law. In recent years, the Japanese Personal Information Protection Law has been attracting attention, and the need for legal checks is increasingly growing.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>On May 30, 2017, the Revised Act on the Protection of Personal Information came into full effect in Japan. Now, all businesses that handle personal data fall under the purview of this law, which is co [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":59429,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18],"tags":[24,29],"acf":[],"_links":{"self":[{"href":"https:\/\/monolith.law\/en\/wp-json\/wp\/v2\/posts\/58964"}],"collection":[{"href":"https:\/\/monolith.law\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/monolith.law\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/monolith.law\/en\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/monolith.law\/en\/wp-json\/wp\/v2\/comments?post=58964"}],"version-history":[{"count":4,"href":"https:\/\/monolith.law\/en\/wp-json\/wp\/v2\/posts\/58964\/revisions"}],"predecessor-version":[{"id":59459,"href":"https:\/\/monolith.law\/en\/wp-json\/wp\/v2\/posts\/58964\/revisions\/59459"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/monolith.law\/en\/wp-json\/wp\/v2\/media\/59429"}],"wp:attachment":[{"href":"https:\/\/monolith.law\/en\/wp-json\/wp\/v2\/media?parent=58964"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/monolith.law\/en\/wp-json\/wp\/v2\/categories?post=58964"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/monolith.law\/en\/wp-json\/wp\/v2\/tags?post=58964"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}