Act on the Protection of Personal Information (Japan)

The Act on the Protection of Personal Information (APPI) is a data protection law administered and enforced by the Personal Information Protection Commission (PPC) in Japan. APPI describes the key obligations that organizations that handle personal identifiable information (PII) have to the individuals whose PII they handle. The guidelines include security measures broken out into four categories; organizational measures, personnel controls, physical security controls, and technical controls.

Google Cloud has produced a whitepaper that examines APPI from the perspective of adopting Google Cloud services. It addresses roles and responsibilities under the shared responsibility model and shows how Google Cloud can provide a secure foundation for workloads that store and process PII. The whitepaper also provides information on how Google Cloud products and services can help customers meet the recommended security measures of the PPC Guidelines.