Can I request deletion of my data?

What the Law Says

Under Japan’s Act on the Protection of Personal Information (APPI), individuals have a legal right to request that a business delete their personal data in certain situations.

The APPI grants data subjects the right to request deletion of their personal information if it was collected or used unlawfully, is no longer necessary for the original purpose, or was obtained through deception or coercion.

Businesses must respond to a deletion request without delay — generally within 72 hours — and complete the deletion within 30 days unless legally prohibited or technically impossible.

However, deletion may be refused if required by law (e.g., tax or financial record-keeping), needed for contract performance, or necessary to protect life, health, or property of others.

Statutory Text

The handling operator shall, without delay, delete personal information… when requested by the individual concerned, if the personal information was handled in violation of laws and regulations… or is no longer necessary for the purpose of use.

— Act on the Protection of Personal Information, s. 29 — Right to Request Deletion

Statutory Text

The handling operator shall comply with the request without delay, and in any case within thirty days from the date of receipt of the request.

— Act on the Protection of Personal Information, s. 29(2)

What to Do

Sources