Data Protection, Privacy, and Cybersecurity

With the ever-increasing scope and complexity of data protection regimes around the world, it is essential for companies handling personal information to have effective data protection regimes and the ability to deal with data losses promptly to minimize reputational and financial damage.


Digitalization of public services and concerns on national security of data recently increasing across the world gives rise to the need for multinational businesses to understand Japanese regulations on transfers of national security-related data to foreign countries and secrecy of data of foreign businesses transferred to Japan.


Atsumi & Sakai handles cross-border and domestic data protection and data loss matters on a weekly basis with a highly experienced team of expert Japanese lawyers and foreign lawyers familiar with the nuances of Japanese data protection law and can assist with:

  • Data protection compliance audits
  • Data protection training (in-person and online)
  • Data management systems
  • Handling and reporting of data losses
  • Digital forensics investigations
  • Hacking countermeasures and investigations
  • Managing third-party data handlers
  • Data collection and storage
  • Data transfers within a group and to third parties
  • Data transfers offshore and comparative data protection rights
  • Employee misuse of personal data
  • Data subjects’ rights
  • Helpline support
  • IP rights and protections
  • Privacy policies
  • Children’s data
  • Compliance training
  • Data transfer and processing agreements
  • Cookies
  • Tracking
  • Targeting advertising
  • Apps
  • Outsourcing
  • Cloud services
  • Ethics
  • Internal data-handling and cyber security rules
  • Responding to regulatory enquiries and actions
  • Digital government; government procurement of cloud services
  • Outsourcing of infrastructure data (oil & gas, chemical, manufacturing)
  • Trade compliance and exporting data
  • Protection from authorities’ access to data (investigation and litigation)

The team also is familiar with leading foreign data protection regimes such as the EU General Data Protection Regulation (GDPR), China’s Cybersecurity Law and the California Consumer Privacy Act (CCPA).


When advising foreign clients, our firm can field a team of expert Japanese lawyers and foreign lawyers who have relevant experience and bi-cultural sensitivity. Our team can do business and draft documents in Japanese, English, German, Mandarin, Hindi, Korean, and Marathi, and provides services around the clock through our global affiliated offices.



Related Practices

Related Professionals

Senior Partner

Chie Kasahara

Senior Partner

Ryuichi Nozaki

Senior Partner

Takafumi Ochiai


Fumiaki Matsuoka

Senior Partner

Kentaro Mano


Osamu Fujiwara


Chie Shinsha


Kiyoshi Yasutomi


Takanori Gondo


Shintaro Hoshino


Hirofumi Yoshida