Japan Eases Data Protection Laws to Boost AI Development

• •Japan has amended privacy laws to facilitate AI development by easing data consent requirements.
• •Organizations can now use personal data for research without opt-in consent, including health data.
• •In case of data breaches, companies may not need to notify affected individuals if risks are low.

On April 8, 2026, Japan's government approved amendments to the Personal Information Protection Act, allowing organizations to use personal data without obtaining consent for certain low-risk applications. This legislative change aims to position Japan as a leader in AI development by facilitating easier access to data. The amendments include provisions for using health-related data to improve public health and allow the collection of facial images without mandatory opt-out options. While parental consent is required for data on minors, organizations face fines for malicious data use or fraudulent data acquisition. However, in the event of a data breach, notification to affected individuals is not required if harm risk is deemed low. Minister Hisashi Matsumoto emphasized the need for these changes to prevent hindering AI progress in Japan, which has lagged in digital transformation despite its technological reputation.