Japan Deemed a Sector Specific, Safe Third Country by the Danish DPA
Published 2 July 2019
Category: Other Compliance Requirements
On 23 January 2019, the European Commission adopted a decision, stating that Japan ensures an adequate level of protection for personal data transferred to recipients subject to the Japanese Act on the Protection of Personal Information (“APPI”).
Consequently, on 28 June 2019, the Danish Data Protection Agency (“DPA”) updated their guidelines on transfer of personal data to third countries in accordance with the decision. This means that transfer of personal data from Denmark to (private) organisations in Japan that are subject to the APPI will not require prior approval from the DPA.
Next steps: As also the case for other adequacy decisions adopted by the European Commission (e.g. the approval of the EU-U.S. Privacy Shield), the Commission will continuously monitor the legal framework on which the decision is based.
See the update from the Danish DPA here (in Danish).