Japan Implements Preemptive Cybersecurity Laws Amid Rising Threats

• •Japan's preemptive cybersecurity laws took effect on October 1, 2026.
• •Critical infrastructure operators must report cyber breaches to the government.
• •The government will enhance threat hunting capabilities in fiscal 2027.

On October 1, 2026, Japan enacted preemptive cybersecurity laws to counteract increasing cyberattack threats. These laws, which were established in May 2025, empower police and the Self-Defense Forces to neutralize hostile servers before attacks occur. Key infrastructure operators, such as power plants and railways, are now required to report cyber breaches to the government. Prime Minister Sanae Takaichi emphasized the importance of these measures for national security. The Japan Active Cyber Defense Oversight Commission will oversee the implementation of these laws, ensuring proper use of communications data. Additionally, the government plans to enhance threat hunting capabilities in fiscal 2027, focusing on detecting hidden threats within critical infrastructure systems. This initiative will involve collaboration with private sector firms to develop detection methods and recreate attacks in a virtual environment. The Defense Ministry will also assist critical infrastructure operators directly. The full-scale monitoring measures are set to launch in 2027.