Next Anticipated Amendment: Regulation of Secrecy of Communication for Foreign Platformers? 2:30 p.m. – 3:30 p.m., 2019-04-04 (Thu.) Int’l Privacy + Security Forum 2019 Session: Japanese Privacy+Security Law Hideyuki (“Yuki”) MATSUMI hmatsumi at law.gwu.edu; matsumi at boaltalum.berkeley.edu
Today’s Summary 1. It is said that there would be a new regulation on “ foreign platformers ” doing business in Japan. 2. Multiple regulations are anticipated, but one of which concerns “ secrecy of communication .” 3. In Japan, secrecy of communication is governed/regulated by the Constitution of Japan and the Telecommunications Business Act. 4. Currently, only JP telecommunication businesses are subject to regulation re secrecy of communication; however, in the near future, foreign businesses are likely to be subject to the same regulation. 2019-04-04 IPSF 2019: Japanese Privacy+Security Law 2
Today’s Goal • We aim to gain/deepen/widen our understanding on: 1. Relationship and difference between “ privacy ” and data protection in Japan. 2. Regulation of Secrecy of communication in Japan 3. Anticipated regulation on foreign platformers – by reading interim report published recently which is written in JP (no EN translation…!) 2019-04-04 IPSF 2019: Japanese Privacy+Security Law 3
Today’s Contents 1. Today’s Summary and Goal 2. Chapter 1: Background and Basics of Secrecy of Communication 3. Chapter 2: Secrecy of Communication in Japan 4. Chapter 3: The Interim Report 2019-04-04 IPSF 2019: Japanese Privacy+Security Law 4
Data Protection? Privacy? or . . . プライバシー? 1. 2. “Privacy” and Personal Information Protection in Japan CHAPTER 1: BACKGROUND AND BASICS OF SECRECY OF COMMUNICATION 2019-04-04 IPSF 2019: Japanese Privacy+Security Law 5
Data Protection? Privacy? or . . . プライバシー? In US/EU, . . .? In Japan, . . . (little too oversimplified) US: privacy Data “Privacy” protection (プライバシー) (Personal info. protection) EU: data protection 2019-04-04 IPSF 2019: Japanese Privacy+Security Law 6
“Privacy” and Personal Information Protection in Japan “Privacy” (プライバシー) PI protection (個人情報保護) • The Constitution of Japan • Act on the Protection of – Article 21 Personal Information (“APPI”) – Article 35: The right of all persons to be secure in their homes, papers and effects • against entries, searches and seizures shall 2003: Passed (became law) not be impaired . . . . • • Many case laws 2005: Full enforcement – Tokyo Dist. Ct. 1965.9.28 (ruling on conflict • 2017: Revised between freedom of expression) – Supreme Ct. 2005.11.10 (ruling on • likeness) 2018 - 2019: Adequacy – Sup. Ct. 2017.1.31 (ruling on so-called determination “right to be forgotten”) • In EU: injunction under data protection • Follows FIPPs model (e.g., law – Sup. Ct. 2017.3.15 (ruling on warrantless purpose, notice, consent, data investigation using GPS) quality, participation, etc) 2019-04-04 IPSF 2019: Japanese Privacy+Security Law 7
1. Secrecy of Communication 2. Article 21 of the Constitution 3. Telecommunications Business Act (“TBA”) 4. More detail on Secrecy of Communication: 1. Scope , What constitutes “violation,” and Defense CHAPTER 2: SECRECY OF COMMUNICATION IN JAPAN 2019-04-04 IPSF 2019: Japanese Privacy+Security Law 8
Secrecy of Communication • Sources of law – The Constitution of Japan (November 3, 1946) – Telecommunications Business Act (Act No. 86 of December 25, 1984) • In Japan, it is considered to be a law concerning privacy as well as security. • Administrative authority with jurisdiction: the Ministry of Internal Affairs and Communications (“MIC”) 2019-04-04 IPSF 2019: Japanese Privacy+Security Law 9
Article 21 of the Constitution Original Japanese English Translation 第二十一条 集会、結社及び言論、 Article 21. Freedom of assembly and 出版その他一切の表現の自由は、こ association as well as speech, press れを保障する。 and all other forms of expression are guaranteed. 検閲は、これをしてはならない。通信 No censorship shall be maintained, の秘密は、これを侵してはならない。 nor shall the secrecy of any means of communication be violated. 2019-04-04 IPSF 2019: Japanese Privacy+Security Law 10
Telecommunications Business Act (“TBA”) Original Japanese English Translation (検閲の禁止) (Prohibition on Censorship) 第三条 電気通信事業者の取扱中に係る通 Article 3 No communications being handled by 信は、検閲してはならない。 a telecommunications carrier shall be censored . (秘密の保護) (Protection of Secrecy) 第四条 電気通信事業者の取扱中に係る通 Article 4 (1) The secrecy of communications 信の秘密は、侵してはならない。 being handled by a telecommunications carrier shall not be violated. 2 電気通信事業に従事する者は、在職中電 (2) Any person who is engaged in a 気通信事業者の取扱中に係る通信に関して telecommunications business shall not disclose 知り得た他人の秘密を守らなければならない。 secrets obtained, while in office, with respect その職を退いた後においても、同様とする。 to communications being handled by a telecommunications carrier. The same shall apply even after he/she has left the office. 2019-04-04 IPSF 2019: Japanese Privacy+Security Law 11
Telecommunications Business Act (“TBA”) Original Japanese English Translation 第百七十九条 電気通信事業者の取扱中に Article 179 (1) Any person who has violated the 係る通信(第百六十四条第三項に規定する通 secrecy of communications being handled by a 信を含む。)の秘密を侵した者は、二年以下の telecommunications carrier (including 懲役又は百万円以下の罰金に処する。 communications set forth in Article 164 paragraph (3)) shall be punished by imprisonment with work of not more than two years or a fine of not more than one million yen. 1 million JPY = 9,097 USD 2 電気通信事業に従事する者が前項の行為 (2) Any person engaging in a をしたときは、三年以下の懲役又は二百万円 telecommunications business who has 以下の罰金に処する。 committed the act set forth in the preceding paragraph shall be punished by imprisonment with work of not more than three years or a fine of not more than two million yen. 3 前二項の未遂罪は、罰する。 (3) An attempt at the offenses set forth in the preceding two paragraphs shall be punished. 2019-04-04 IPSF 2019: Japanese Privacy+Security Law 12
Scope of Secrecy of Communication • Very broad, according to Tokyo district court’s ruling (2002.04.30). • Not only: (1) content of each communication; • But also: (2) – date and time (when the communication took place); – place (where the communication took place); – name, address, identification code such as telephone number of parties concerned in the communication; – frequency (number of times) of communication; and – any other type of information that would enable to: • guess whether or not communication has occurred; or • guess semantic content of the communication. 2019-04-04 IPSF 2019: Japanese Privacy+Security Law 13
What constitutes “violation” of Secrecy of Communication? • Generally, three types of acts constitute violation of secrecy of communication: • (1) 知得 = comprehension ( ≒ access) – Placing the communication in a condition in which one can access, with an intent to gain knowledge about the communication • (2) 窃用 = using without permission ( ≒ appropriation) – Using the communication against the will of parties concerned • (3) 漏えい = reveal, disclosure – Leaving the communication in a condition in which others can access 2019-04-04 IPSF 2019: Japanese Privacy+Security Law 14
Defense (Justifiable cause: 違法性阻却事由 ) • Valid consent obtained from parties concerned in the communication – E.g., filtering service – [Food for thought] All parties or one party? Comprehensive consent or “ individual, specific, and unambiguous ” consent? • Still legal if one of three is met even in absence of valid consent – (1) Acts in accordance with other laws • E.g., Search and seizure of communication history pursuant to court issued warrant – (2) Acts committed in the pursuit of lawful business (Penal Code Article 35, Justifiable Acts) • E.g., using telephone history for billing purpose. – (3) Self‐defense or “averting present danger” (necessity) in criminal law (Penal Code Article 36 & 37) • E.g., Reading emails/messages to prevent suicide 2019-04-04 IPSF 2019: Japanese Privacy+Security Law 15
Extra Territorial Application In Short, TBA does not apply to foreign businesses with no servers in JP 宍戸 常寿 , 個人情報・プライバシー・通信の秘密-憲法から見た , https://www.dekyo.or.jp/kenkyukai/data/8th/190217_doc01.pdf 2019-04-04 IPSF 2019: Japanese Privacy+Security Law 16
1. How might the Regulation Look Like? 2. Issues: 1. Applicability to Foreign Platformers; Profiling and Behavioral targeting; Consent; and Enforcement 3. Other keywords CHAPTER 3: THE INTERIM REPORT 2019-04-04 IPSF 2019: Japanese Privacy+Security Law 17
Recommend
More recommend