• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • Skip to secondary sidebar

Alston & Bird Privacy, Cyber & Data Strategy Blog

  • Home
  • Services
  • Events
  • Contacts

Japan’s Personal Information Protection Committee releases guidance on contact tracing mobile apps to combat COVID-19

May 4, 2020 By Maki DePalo

On May 1, the Personal Information Protection Committee in Japan (PPC) released guidance on the use of contact tracing mobile apps (Apps) as one of the mechanisms to combat the spread of COVID-19 and highlighted five essential consideration points.  Specifically, the PPC recommends that all “personal information handling business operators” carefully consider, and disclose their practices on, the following points in connection with Apps:

  1. Obtaining consent of individuals upon conspicuous disclosure of the processing purposes, including any collection of “special care-required personal information” and disclosure of personal data to third parties, with particularity and in an easily-understandable manner.
  2. Eschewing from collecting or disclosing data not necessary for the processing purposes.
  3. Implementing a mechanism to delete data, without delay, when they are no longer necessary for the processing purposes to avoid unnecessary retention of data.
  4. Securing data and supervising employees and vendors.
  5. Establishing a method to handle user inquiries and complaints.

In the guidance, the PPC acknowledges the potential benefits of Apps, if these Apps are widely adopted, as well as the role of collaboration between public and private sectors in combatting the spread of COVID-19.  However, the PPC stresses the necessity of striking the appropriate balance between the protection of individuals’ privacy rights and the value of the information for public safety purposes.  To achieve this balance, the PPC recommends trust building with App users by focusing on transparency and information safeguards.

The PPC also notes that information processed by these Apps may not be necessarily subject to the Act on the Protection of Personal Information (APPI) in Japan.  However, whether certain information is subject to the APPI depends on other types of information businesses may already hold, and the PPC advises that each business review the potential impact of each App usage.

<Link to the Guidance in English – updated on 5/7/2020>

Filed Under: Data Protection, Data Security, International, Mobile Privacy, Online Privacy, Privacy Tagged With: COVID-19, Japan

About Maki DePalo

Maki DePalo is a partner on Alston & Bird’s Privacy & Data Security Team. She devotes her practice to clients' initiatives in technology and corporate transactions encompassing intellectual property licensing, strategic outsourcing, Internet-based marketing and advertising, data privacy and security, governance and compliance.

[Read Bio]

Primary Sidebar

This blog is a service of Alston & Bird’s Privacy, Cyber & Data Strategy team and focuses on key data privacy and data security issues.


Receive email notifications when new posts are added.

Receive email notifications when new posts are added.


THE DIGITAL DOWNLOAD
Click here to see the editions

PRIVACY & CYBER EVENTS
Click here to see upcoming and past events

PRIVACY & CYBER MAILINGS
Click here to sign up

@ALSTONPRIVACY
Click here to follow us on Twitter

Secondary Sidebar

Categories

Recent Posts

  • European Commission Adopts Draft UK Adequacy Decision
  • NYDFS Issues Best Practices for Cyber Insurance Risk Management
  • Fifth Circuit Decision Raises Cyber Enforcement Complications for the U.S. Department of Health and Human Services
  • Virginia Ready to Pass First State Privacy Statute after CCPA
  • The EDPB-EDPS Joint Opinion on Data Processing Standard Contractual Clauses: Key Takeaways
Copyright © 2021 · Alston & Bird · All Rights Reserved. Privacy.