TOKYO - Japan's parliament on Friday enacted a revised personal data protection law to enable companies to use sensitive information without consent as the country pushes for domestic artificial intelligence.
Information collected via social media and other platforms for purposes such as AI and statistical analysis can include race, personal beliefs, and medical and criminal histories but should not identify individuals.
According to Japanese news reports, this personal information can also be handled by sole proprietors and foreign companies "if certain conditions are met."
Furthermore, anonymization is not required, and it is possible to link the information, including medical history.
データを外部に提供する際、提供元がデータ内の氏名を匿名化することも求められていない。一定の条件を満たせば、海外企業や個人事業主もデータの提供を受けられることから、データ流出や悪用への対策が不十分と指摘されていた。政府は今後、策定する規則やガイドラインによって不正利用を防ぐとしている。
改正個人情報保護法が成立 病歴や信条も…本人の同意なく提供可能に：朝日新聞
I am adding this comment as related information has come to light.
In March of this year, Prime Minister Sanae Takaichi met with a representative of Palantir Technologies.
Courtesy call on Prime Minister TAKAICHI by Mr. Thiel, Co-Founder and Chairman, Palantir Technologies Inc. | Ministry of Foreign Affairs of Japan (March 5, 2026)
On Japanese social media, there are voices speculating that this relationship between Palantir and Japan may have led to the introduction of this bill.