Identify, control and audit the flow of personal information to ensure confidentiality, and demonstrate Japan PIPA (PIPL) compliance

The Japan Personal Information Protection Act (PIPA) or Law (PIPL) requires that enterprises manage and protect the rights of Japanese citizens with regard to their personal information while preserving the usefulness of information technology and personal information for legitimate purposes.

The law requires that businesses communicate why they are collecting and using personal information. Businesses must take reasonable precautions to protect personal information from improper disclosure, unauthorized use or destruction. Persons who violate PIPA can face criminal penalties of up up to six months in prison and civil penalties of up to 300,000 yen.

Japan Data Protection Applications

NextLabs' solution is a set of applications which include a comprehensive set of pre-built policy libraries and pre-built reports addressing Japan PIPA/PIPL Compliance regulations. Policy sets can be easily customized to the environment or used as templates to create new policies. The solution can:

• Identify personal data and protect it from unauthorized disclosure and loss.
• Prevent accidental destruction of personal information, and securely destroy personal data when required.
• Identify documents containing personal information and alert users about policies and procedures for proper handling of private information.
• Manage entitlements to limit access to data on personnel on a need-to-know basis.
• Automate information handling to prevent loss and reduce procedural errors.
• Establish information barriers to ensure information will be limited to its disclosed purposes, and communicated only for its intended purpose, by intended persons, in intended locations, and during intended times.
• Prevent the export of personal information to third parties or affiliates to whom customers did not authorize distribution.
• Enforce persistent privacy policies upon customer personal information whenever that information is distributed to business partners, agents, affiliates and contractors.
• Report on any potential information risks, and discover gaps in compliance with personal data protection regulations.