The European Union and Japan finalized common rules to protect personal information, and launched what they called the “world's largest areas of safe data flows”. Firms can transfer data now that the executive European Commission finds that Japanese law offers “a comparable level of protection of personal data,” the commission said.
“This adequacy decision creates the world's largest area of safe data flows,” EU justice commissioner Vera Jourova said, referring to an area of more than 600 million people. “Europeans' data will benefit from high privacy standards when their data is transferred to Japan,” the Czech commissioner said. “Our companies will also benefit from a privileged access to a 127 million consumers' market,” she added.
Jourova said the arrangement "will serve as an example for future partnerships" on data flows and set global standards.
The two sides cleared the final hurdle by agreeing on supplementary rules. These cover the protection of sensitive data, the exercise of individual rights and the conditions under which EU data can be further transferred from Japan to another third country.
Japan's independent data protection authority (PPC) and courts can enforce these rules covering Japanese firms that import data from EU.
Tokyo gave Brussels assurances that any use of personal data for law enforcement and national security purposes would be “limited to what is necessary and proportionate.” Access by public authorities for these reasons would be “subject to independent oversight and effective redress mechanisms,” the EU executive said.
The two sides agreed to a mechanism to investigate and resolve complaints from Europeans over data access that Japan's independent data protection authority will run and supervise. The decision complements the EU-Japan Economic Partnership Agreement, which takes effect in February to become the world's biggest trade deal.
