Information regarding the protection of Personal Information of third parties in foreign countries
Information regarding the protection of Personal Information of third parties in foreign countries
-
- If a third party to which your Personal Information is provided is located in a foreign country, information regarding the protection of Personal Information in that foreign country is as follows (please check the schedule, etc. for specific country names).
-
- (1)
Countries subject to the GDPR (EU General Data Protection Regulation) and the UK (designated by the Personal Information Protection Commission as foreign countries etc. with systems for the protection of Personal Information that are deemed to have the same level of protection as Japan.)
Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Liechtenstein, Iceland, Norway, United Kingdom
(Reference: Personal Information Protection Commission Notification No. 1 and No. 5 of 2019)
- (2)
Countries and regions that have obtained adequacy determination under Article 45 of the GDPR (the European Commission has recognized that the country has an adequate level of data protection under the GDPR.)
Argentina, Andorra, United Kingdom, Israel, Uruguay, Canada, Switzerland, New Zealand
- (3)
Member countries and regions of the APEC CBPR system (which have laws and regulations that comply with the APEC Privacy Framework)
America, Mexico, Canada, Singapore, South Korea, Australia, Taiwan, Philippines
- (4)
Countries that comply with all eight principles of the OECD Privacy Guidelines
(The OECD Privacy Guidelines set out eight basic principles: (1) principle of collection limitation, (2) principle of data content, (3) principle of purpose clarification, (4) principle of use limitation, (5) principle of security protection, (6) principle of disclosure, (7) principle of individual participation, and (8) principle of responsibility.)*The above five countries are based on our own research.
- (5)
Countries that do not comply with some of the eight principles of the OECD Privacy Guidelines
*The status of compliance with the OECD Privacy Guidelines' 8 Principles is published on the website of the Personal Information Protection Commission (external site). Click on the country name above to view the PDF of the Personal Information Protection Commission.
*The above two countries are based on our own research.
- (6)
Countries without comprehensive legislation on Personal Information protection
*Each of the above countries has its own laws and regulations regarding the protection of Personal Information, and the details of these laws are published on the website of the Personal Information Protection Commission (external site). Click on the name of the country above to view the PDF of Personal Information Protection Commission.
*The above six countries are based on our own research.
- (7)
Countries that do not have systems for protecting Personal Information
United Arab Emirates
*The countries listed in (4) to (7) above have not been certified as adequate under the GDPR and are not members of the APEC CBPR.
*The United Arab Emirates, India, Indonesia, Cambodia, Singapore, Thailand, China, Vietnam, Hong Kong, Myanmar, Laos and Russia have systems in place that allow governments to collect a wide range of information about Personal Information held by businesses by imposing extensive obligations on businesses to cooperate with government information-gathering activities.
-
- Measures taken by the transportation, Accommodation, etc. receiving the information to protect Personal Information
-
We make it a condition of our contract with travel arrangement agencies that transportation, Accommodation, etc. comply with the 8 principles of the OECD Privacy Guidelines.
End
May. 2023
