TOKYO - Japan’s parliament on Friday enacted a revised personal data protection law to enable companies to use sensitive information without consent as the country pushes for domestic artificial intelligence.

Information collected via social media and other platforms for purposes such as AI and statistical analysis can include race, personal beliefs, and medical and criminal histories but should not identify individuals.

According to Japanese news reports, this personal information can also be handled by sole proprietors and foreign companies “if certain conditions are met.”

Furthermore, anonymization is not required, and it is possible to link the information, including medical history.

When providing data to external parties, providers are not required to anonymize the names contained within the data. Because overseas companies and sole proprietors can also receive data if certain conditions are met, it has been pointed out that measures against data leaks and misuse are insufficient. The government says it will prevent misuse through rules and guidelines that it will formulate in the future.

Revised Personal Information Protection Law Enacted: Medical History and Beliefs Can Now Be Provided Without the Individual’s Consent: Asahi Shimbun