Japan’s APPI was one of the first data protection laws to be introduced in Asia. After significant amendments, a revised version came into force on 30 May 2017, allowing Japan to become the first country in Asia to be granted adequacy status by the European Commission. The APPI contains provisions for special or sensitive information, defines personal data as information that can be used to identify an individual, includes an extraterritorial scope, and establishes obligations for operators or controllers/processors who handle personal data.