Yes. Japan's Act on the Protection of Personal Information applies to businesses that handle personal information, and an agent reading, storing or sending it does so on the business's behalf. The duties that bite hardest for agents are staying within the stated purpose of use, controlling provision to third parties and overseas, and keeping records.
What does APPI require, in substance?
APPI is technology-neutral. It sets duties for any business handling personal information in Japan, and some duties for businesses abroad that handle the information of people in Japan. In substance:
- Purpose of use. Specify the purpose as clearly as possible, tell people or publish it, and use the information only within it unless you obtain consent.
- Proper acquisition. Do not obtain information by deceptive or improper means. Information requiring special care, such as medical history, generally needs consent to acquire.
- Security and supervision. Take security control measures, and supervise employees and any contractor entrusted with the data.
- Third-party provision. Providing personal data to a third party generally requires consent, with exceptions, including entrustment to a contractor handling it on your behalf.
- Overseas transfers. Providing personal data to a third party in a foreign country carries extra conditions, typically informed consent or a recipient with an equivalent system in place.
- Records. Keep records when providing personal data to third parties, and when receiving it from them.
- Requests. Respond to people's requests for disclosure, correction and cessation of use of their retained data.
For financial firms, the Financial Services Agency supervises how regulated businesses manage customer information and outsourcing, so an agent in a bank or insurer will be looked at through both lenses.
This is an explanation of the rules, not legal advice; confirm how they apply to you with counsel.
Where do agents create APPI risk?
Purpose drift. An agent with broad access can use data collected for one purpose to serve another, for example using claims data to tailor a sales message. Nothing in the agent's design stops it unless you bound its sources by purpose.
Unplanned provision. An agent with outbound tools can send personal data to a third party in the ordinary course of a task. Under APPI, that may be a provision needing consent and a record.
The model provider's location. If the model or platform runs outside Japan, sending prompts with personal data can be an overseas transfer. Whether it counts as entrustment or provision to a third party affects which rules apply, and the answer depends on the arrangement.
What may the agent do, and what stays with a person?
| Activity | Agent | Person |
|---|---|---|
| Use data within the published purpose | Yes | Defines the purpose |
| Use data for a new purpose | No | Decides and obtains consent if needed |
| Send data to the customer themselves | Yes, to verified details | Changes to verified details |
| Send data to a third party | Drafts only | Approves, checks consent, ensures a record |
| Answer disclosure or correction requests | Gathers the data | Responds and confirms completeness |
An illustrative example
Take a Japanese life insurer using an agent to help policyholders update beneficiaries. The agent's sources include the policy system and, for convenience, the medical underwriting file. A policyholder asks a simple question about premium dates, and the agent's reply mentions a past medical disclosure.
Nothing left the company, but the agent used information requiring special care beyond the purpose for which the customer provided it. The insurer removes the medical file from the agent's sources, records which sources serve which purpose, and adds a check that any outbound message containing special care information is held for a person. Its records of third-party provision now include the agent's outbound tool as a channel.
Which controls meet APPI for agents?
- Purpose-bound sources: each agent may only read data collected for purposes that cover its job.
- Outbound tools mapped to third-party provision rules, with holds where consent must be checked.
- Provider assessment: where the model runs, and whether the arrangement is entrustment or provision.
- Records of provision, produced automatically when the agent sends data out. Logs built for other regimes may not capture this; see why Article 12 logging is not enough for agents.
- Request handling that searches the agent's memory and logs.
Comparable laws elsewhere frame similar duties differently; see whether the LGPD applies to AI agents for Brazil. The broader map is in AI agent regulation, mapped to controls.
Questions people ask
Does APPI apply to a foreign company's agent serving customers in Japan?
It can. APPI reaches some businesses outside Japan that handle personal information of people in Japan in connection with supplying goods or services to them. Check with counsel if your agent serves Japanese customers.
Is sending data to a model provider a third-party provision?
It depends on the arrangement. Where the provider handles the data only to perform the service for you, it may be entrustment, which brings a duty to supervise. Where it uses the data for its own purposes, it looks like provision.
Does APPI regulate the AI itself?
No. It regulates the handling of personal information. Questions about how a financial firm's agent behaves, such as its fairness or reliability, fall to sector supervisors like the Financial Services Agency.