Japan's national Diet has passed an amendment to the Personal Information Protection Act to relax regulations on acquiring personal data [1].

The move aims to accelerate the development of artificial intelligence and statistical research by lowering the barriers for data acquisition [1]. By easing these restrictions, the government seeks to make Japan more competitive in the global AI race, though the shift removes key protections for individuals.

Under the new rules, developers and researchers can use sensitive information, including medical histories, race, and religious beliefs, without obtaining the consent of the affected individuals [2]. This change specifically targets contexts involving AI development and the creation of statistics [2].

The legislation followed a phased approval process in Tokyo. The House of Representatives passed the measure on May 26, 2026 [3], and the House of Councillors approved the amendment during a plenary session on June 10, 2026 [1].

Opposition members, including representatives from the Constitutional Democratic Party and Komeito, said the amendment increases the risk that personal information will leak [2]. One veteran lawmaker said the measure was a flawed bill, the likes of which they had not seen in a long legislative career [4].

Critics argue that the lack of consent is particularly dangerous regarding healthcare data. An editorial by the Asahi Shimbun said it is natural to worry about leakages when medical histories held by hospitals are passed to third parties without the patient's agreement [5].

The Personal Information Protection Act is subject to a review process every three years [6]. This cycle allows the government to adjust privacy standards as technology evolves, though the current amendment represents a significant departure from previous consent-based requirements.

“The amendment relaxes regulations on acquiring personal data for AI development and statistical creation.”

This legislative shift signals Japan's priority of technological acceleration over individual data sovereignty. By removing the consent requirement for 'sensitive' data, Japan is attempting to create a high-volume data pipeline to train domestic AI models, potentially making it a more permissive environment for AI firms than jurisdictions with stricter privacy frameworks like the EU's GDPR.