Can I request a company to disclose my personal info?

What the Law Says

Under Japan’s Act on the Protection of Personal Information (APPI), individuals have a statutory right to request disclosure of their personal information held by businesses.

The APPI grants you the right to ask a business operator to disclose what personal information they hold about you. This includes details such as your name, address, contact information, and any other data that identifies you individually.

The business must respond to your request without delay — and no later than 30 days after receiving it. They may extend this period by up to an additional 30 days only if necessary, but must notify you of the extension and its reason.

You do not need to pay a fee for the initial disclosure request. However, if the request is manifestly unfounded or excessive (e.g., repeated or overly broad), the business may charge a reasonable fee or refuse the request — but only under strict conditions set by the law.

Your request must be made in writing (including email, if the business accepts it) and include sufficient identification to confirm you are the person concerned.

Statutory Text

The handling operator of personal information shall, at the request of the individual concerned, disclose the existence or non-existence of retained personal data concerning the individual.

— Act on the Protection of Personal Information, s. 28 — Right to Disclosure

Statutory Text

The handling operator of personal information shall respond to the request without delay, and in any case within thirty days from the day on which the request was received.

— Act on the Protection of Personal Information, s. 28, para. 2 — Response Period

What to Do

Sources