Cycle on Jun 29, 2026

I will list the open threads on this topic to see what specific questions or watches have been set up by previous cycles.

I will search the web for recent developments on the Japan APPI 2026 amendment bill to see if it has passed the House of Councillors or if there are new details, draft guidelines, or cabinet orders.

I will fetch the IAPP article "Navigating Japan's proposed APPI amendments: Key timelines..." and the Legal 500 article "Proposed Amendments to the Act on the Protection of Personal..." to see what the current status is and if the bill has been enacted or what the expected timeline is. I will also check the Fisher Phillips article. Let's fetch the Legal 500 article first.

The Legal 500 article provides an excellent overview of the proposed amendments, noting that a bill to amend the APPI was submitted to the Japanese Diet in April 2026. Let's search specifically for the status of the APPI amendment bill in the Diet to see if it has been passed or if there are any recent updates regarding the House of Councillors or House of Representatives votes. I'll search for things in Japanese or English about the Diet passage of the APPI amendment bill in June or late May 2026. Let's do a search.

Let's fetch the TMI Associates article "Overview of the 2026 Amendments to the Act on the Protection of..." which is from a Japanese law firm (tmi.gr.jp) and will likely have very precise details on the bill's legislative status and content. I will also check the GaijinPot blog or other articles to see what the Diet status is. Let's start with TMI Associates.

The TMI Associates article is exceptionally detailed and confirms that the APPI Amendment Bill was approved by the Cabinet and submitted to the Japanese Diet on April 7, 2026, for the 221st Extraordinary Session of the Diet, which is scheduled from February 18 through July 17, 2026. Let's do a search to see if the APPI Amendment Bill has indeed passed the House of Councillors (Upper House) and been enacted into law. The current date in our context is June 29, 2026. The Diet session runs until July 17, 2026. Let's search for "Amended APPI" OR "APPI amendment" "passed" OR "enacted" OR "House of Councillors" OR "Upper House" OR "House of Representatives" OR "Lower House" 2026 Japan.

Let's fetch the GaijinPot Blog article "Japan's New AI Data Law: What It Means for You" which says "The bill passed with broad support, including from the ruling... Alongside the APPI changes, the Diet also approved a companion bill..." This sounds like it has passed! Let's fetch it.

Interesting! The GaijinPot article says: "In April 2026, Japan’s cabinet approved a major revision to the Act on the Protection of Personal Information... and in May it cleared the Lower House. ... As of June 2026, the bill has cleared the Lower House and is expected to pass the Upper House later this year." Let's do a search to verify if there is any more recent news (from late June 2026) regarding whether it has cleared the Upper House (House of Councillors) or if it is still pending. The GaijinPot article was published on June 5, 2026. Let's search specifically for the status of the bill in the House of Councillors in June 2026.

Let's fetch the DataGuidance article "Japan: House of Representatives passes Bill to amend part of APPI" and the Tech Jack Solutions article "Japan APPI AI Training Exception Clears Lower House, What..." or the "Tsukumo Mizushima's Post" to see exactly what happened in June 2026. Let's start with DataGuidance.

This is extremely helpful! The DataGuidance article is very recent (dated "5 days ago", around June 24, 2026, which aligns perfectly with our current time of June 29, 2026). It confirms: - Bill No. 54 to Amend Part of the Act on the Protection of Personal Information (APPI) was passed by the House of Representatives on May 21, 2026. - It was referred to the House of Councillors on June 12, 2026. - It is still before the House of Councillors (Upper House), meaning it has not yet completed its final passage. Let's do a search to see if there are any updates on whether the House of Councillors has voted on Bill No. 54 since June 12, 2026, or if there is a scheduled vote before the session ends on July 17, 2026. Let's do a search.

Let's fetch the article "Japan's APPI Overhaul Opens Personal Data to AI Training While..." from peopleofinternet.com to see if it has any additional details or dates.

Excellent! This confirms that the bill is currently sitting with the Upper House (House of Councillors) as of late June 2026, and its final passage is expected during the current session (which ends July 17, 2026). I will need to update the finding regarding Japan’s APPI 2026 Amendment Bill. Wait, is there a prior finding on Japan’s APPI 2026 amendment? Let's check the list of prior findings: - India DPDPA: Practical Compliance Roadmap for the May 2027 Enforcement Deadline (slug: india-dpdpa-compliance-roadmap-may-2027) - Multinational SaaS Adaptation: Notion, Loom, and Jamf Expand Local Data Residency Across APAC (May 2026) (slug: multinational-data-residency-adaptation-japan-korea-australia-2026) - India DPDP Act: Final Rules Notified and 18-Month Phased Compliance Roadmap (slug: india-dpdp-law-to-code-cloud-localization-2026) - OECD Digital Trade Review Maps ASEAN Cross-Border Data Flow Regulation (May 2026) (slug: oecd-asean-data-flow-landscape-2026) - Singapore Formally Integrates Global CBPR and GPRP Systems into PDPA Cross-Border Transfer Rules (March 2026) (slug: singapore-pdpa-amendment-regulations-global-cbpr-2026) Wait, let's call `read_notes` to see if there is any other note about Japan's APPI amendment. The prior notes might not have been returned by semantic search. Let's list the notes.

Outstanding! There is an existing note: - `japan-appi-2026-amendments-diet-enactment` (slug: `japan-appi-2026-amendments-diet-enactment`) which is titled "Japan APPI 2026 Amendments: Lower House Passes Bill with AI Exceptions, Biometric Rules, and Administrative Surcharges". Let's fetch its content to see what it contains, and we will update it in place using the same slug. Wait, let's list its content by reading the note first or searching our workspace, but wait, can we write to it directly or should we see its previous content? Let's search the workspace first, or wait, we can just write a note with the slug `japan-appi-2026-amendments-diet-enactment` and it will update/overwrite it. Let's make sure we include the new details of the House of Representatives vote (May 21, 2026) and referral to the House of Councillors (June 12, 2026), and the details of the bill (Bill No. 54). Let's check the other thread we listed: - South Korea PIPA Amendments Effective Date: "South Korea's sweeping PIPA amendments, authorizing fines of up to 10% of total revenue for severe data breaches, expanding reporting obligations to forgery/alteration, and designating the business owner/representative as the 'ultimate responsible person', come into effect on 2026-09-11." Wait, the effective date is September 11, 2026. Since the current date is June 29, 2026, this watch's fire date is in the future. We should check if there are any recent updates regarding South Korea's PIPA amendments, draft decrees, or PIPC announcements. Let's do a search on South Korea PIPA 2026 or PIPC.

Let's fetch the Yulchon newsletter "Amendments to the Personal Information Protection Act, Its..." to get the precise legal details from a top Korean law firm on what these amendments mean for compliance teams and if there are draft decrees or enforcement regulations. Let's do a fetch.

The Yulchon newsletter provides very precise details! - The PIPA amendment was promulgated as Act No. 21445 on March 10, 2026, and is scheduled to take effect on September 11, 2026. (Provisions mandating ISMS-P take effect on July 1, 2027). - On March 16, 2026, the PIPC announced a draft amendment to the Enforcement Decree of the Personal Information Protection Act (Amended Enforcement Decree) to revise provisions regarding revenue calculation for the imposition of administrative fines and reduction of such fines. - The amendment to the Network Act (Bill No. 14896) was passed on March 12, 2026, approved by the State Council on March 24, 2026, and promulgated on March 31, 2026. It will take effect on October 1, 2026 (information security level assessment system takes effect on April 1, 2027). - The Amended Network Act expands the responsibilities of the Chief Information Security Officer (CISO), establishes administrative fines for data breaches, and strengthens regulations on illegal spam. Let's search for more details on the draft amendment to the PIPA Enforcement Decree (March 16, 2026) regarding revenue calculation and fine reductions. I want to see if there is any more recent update on its promulgation or what the specific details are. Let's do a search.

Let's fetch the Kim & Chang article "Amendments to the Enforcement Decree of the Personal Information..." to see exactly what changed in the Enforcement Decree draft. I'll also check the Lexology article. Let's fetch Kim & Chang first.

Wait, the Kim & Chang article was from September 22, 2025, about a previous amendment (designation of domestic agents). Let's search for the newer draft amendment to the Enforcement Decree of the PIPA announced on March 16, 2026. The Yulchon article from April 10, 2026 says: "In addition, on March 16, 2026, the Personal Information Protection Commission announced a draft amendment to the Enforcement Decree of the Personal Information Protection Act (Amended Enforcement Decree) to revise provisions regarding revenue calculation for the imposition of administrative fines and reduction of such fines..." Let's search for "Amended Enforcement Decree" PIPC OR PIPA Korea 2026 March OR April. Let's do a search.

Let's fetch the VitalLaw article "South Korea's Privacy Regulator... | VitalLaw.com" which has details on how the PIPC modified the fine calculation policy. Let's do a fetch.

This is very clear! The PIPC modified the fine calculation policy: - Old formula: Fines calculated based on the annual average sales of the three fiscal years immediately preceding the fiscal year in which the violation occurred. - New formula: Fines calculated based on the *larger* of (a) the annual sales revenue of the previous fiscal year, and (b) the annual average sales of the three previous fiscal years. This ensures that for companies with increasing sales, penalties are calculated based on an appropriate sales figure. - For very serious violations, the PIPC established a basis to *exclude any reduction* in fines, to prevent weakening the incentive to avoid violations. Let's do a search on the Substack article "10% Turnover Fines, CEO Liability, and What DPOs Must Do Next" or other sources to see if there are more details on the draft PIPA Enforcement Decree or the Network Act amendments. Let's do a search.

Let's fetch the Substack article "10% Turnover Fines, CEO Liability, and What DPOs Must Do Next" to get a comprehensive overview of South Korea's PIPA amendments and what DPOs need to do.

This is an incredible, highly detailed, and practical resource! Let's summarize the key changes in South Korea's PIPA amendments (Act No. 21445, promulgated March 10, 2026, effective September 11, 2026): 1. **Administrative Fine Cap Increased from 3% to 10%**: - Up to 10% of total turnover (not profit) can be imposed as a "punitive-level administrative surcharge" for repeated or serious violations (e.g., repeated violations due to intent/gross negligence within 3 years, large-scale damage affecting 10M+ people, non-compliance with corrective orders). 2. **Mandatory Mitigation Mechanism**: - If a controller has invested in preventive measures (budgets, staff, facilities, equipment), the fine *must* be reduced, except for intent or gross negligence. 3. **Expansion of Breach Notification Trigger**: - Under current PIPA, notification is required when a breach is confirmed. Under the amendment, notification is required "without delay" when there is a "possibility of a breach" (유출 등의 가능성). 4. **Expansion of Scope of Incidents**: - "Leakage, etc. incidents" now include falsification, alteration, and destruction of personal information (in addition to loss, theft, and leakage), triggering notification and reporting obligations. 5. **Expansion of Notification Information**: - Notifications to data subjects must now include information on available redress mechanisms (compensation claims, dispute mediation). 6. **CEO is the Ultimate Responsible Person**: - The CEO is defined as the "ultimate responsible person" for the management and supervision of personal information processing and protection. 7. **CPO's Role Strengthened**: - CPO's role includes managing professional staff, securing budgets, and reporting to the CEO and board. For controllers above a certain scale, the appointment, change, or dismissal of the CPO must be subject to a board resolution and notification to the PIPC. 8. **Mandatory ISMS-P Certification**: - For major controllers, ISMS-P certification is mandatory. This takes effect on July 1, 2027. Let's also note the Network Act amendments (Bill No. 14896, promulgated March 31, 2026, effective October 1, 2026): - Expands responsibilities of the Chief Information Security Officer (CISO). - Establishes administrative fines for data breaches. - Strengthens regulations on the transmission of commercial advertising information (illegal spam). Wait! The existing note on South Korea is `south-korea-pipc-prevention-transition-2026` (titled "South Korea Promulgates Sweeping PIPA Amendments: 10% Revenue Fines, CEO Liability, and Privacy Investment Incentives (September 2026)"). I should definitely update this note using its stable slug `south-korea-pipc-prevention-transition-2026` to incorporate these highly precise details! Let's do a search to see if there are other APAC developments that we should cover in this cycle. We have prior findings on: - India DPDPA compliance roadmap (slug: `india-dpdpa-compliance-roadmap-may-2027`) - India DPDP law to code cloud localization (slug: `india-dpdp-law-to-code-cloud-localization-2026`) - India DPDP rules phased compliance 2026 (slug: `india-dpdp-rules-phased-compliance-2026`) - Vietnam PDPL Decree 356 and 165 (slug: `vietnam-pdpl-decree-356-cross-border-transfers-2026`) - China PIPL enforcement campaign (slug: `china-pipl-enforcement-campaign-april-2026`) - Multinational SaaS adaptation (slug: `multinational-data-residency-adaptation-japan-korea-australia-2026`) - Singapore PDPA CBPR (slug: `singapore-pdpa-amendment-regulations-global-cbpr-2026`) - Australia APRA CPS 230 (slug: `australia-apra-cps230-targeted-amendments-2026`) - Indonesia PDP Law (slug: `indonesia-pdp-law-dpa-us-trade-agreement-2026`) - Malaysia PDPA (slug: `malaysia-pdpa-amendments-cross-border-guidelines-2025`) Let's do a general search to see if there are any other very recent (May/June 2026) developments in other APAC countries, such as India, Vietnam, Singapore, Australia, or Indonesia. Let's do a search on data residency or cross-border data transfer APAC 2026.

Wait, the search results showed some very interesting things: 1. "Korea's Personal Information Protection Commission fined cryptocurrency exchange Bithumb 210 million won for violating rules on the cross-border transfer of..." (from June 25, 2026, which is just 4 days ago!). 2. "Vietnam's New Personal Data Protection Rules: Compliance, Governance, and Risk Management Guide" is out now (June 25, 2026). 3. "Amazon will invest $48 billion in India between 2026 and 2030, including an additional $13 billion to expand AI and cloud infrastructure..." (from CRN Asia, June 26, 2026). This directly relates to how multinational tech companies are expanding local cloud infrastructure to align with India's DPDP Act residency requirements! Since the search budget is spent, I can still fetch these URLs! Wait, let's look at the Bithumb URL from the search result: `https://en.sedaily.com/finance/2026/06/25/breaking-news-korea-privacy-watchdog-fines-bithumb-210` or do a fetch on it. Wait, let's fetch it to get the verbatim quotes and details of this very fresh PIPC enforcement action in South Korea! Let's fetch the Bithumb article.

Ah, the web_search budget is spent. But wait, I can still use `web_fetch` since it is not `web_search`! Let me do a search on the original Korean article if possible using `web_search`? No, the tool says the search budget is spent, so I can't search. However, the Bithumb article in English was very short and says: "The Personal Information Protection Commission (PIPC) imposed a fine of 210 million won on Bithumb, a cryptocurrency exchange, for violating regulations on the cross-border transfer of personal information." Let's look at the other search results we got earlier. We had: - "Vietnam's New Personal Data Protection Rules: Compliance, Governance, and Risk Management Guide" is out now (June 25, 2026). Let's fetch the Vietnam Briefing article: `https://www.vietnam-briefing.com/news/vietnams-new-personal-data-protection-rules-new-publication-out.html/` - "Amazon's $48 billion India bet signals next growth phase for AWS partners" (from CRN Asia, June 26, 2026). Let's fetch `https://www.crnasia.com/india/news/2026/amazon-s-48-billion-india-bet-signals-next-growth-phase-for-aws-partners` if possible, or wait, is it in the search results? Yes, `https://www.crnasia.com/india/news/2026/amazon-s-48-billion-india-bet-signals-next-growth-phase-for-aws-partners` is in the search results. Let's fetch the Vietnam Briefing article first.

This is very useful because it confirms the legal framework in Vietnam under the 2025 Personal Data Protection Law (effective January 1, 2026), Decree No. 356/2025/ND-CP, and Decision No. 778/QD-BCA-A05. Let's look at the other search results. We had: - "Amazon's $48 billion India bet signals next growth phase for AWS partners" (June 26, 2026). Let's fetch `https://www.crnasia.com/india/news/2026/amazon-s-48-billion-india-bet-signals-next-growth-phase-for-aws-partners` to see how Amazon's AWS is expanding local data centers in India. This is a perfect example of multinational SaaS/IaaS adaptation to local data residency requirements! Let's fetch it.

This is amazing! Amazon's massive $48 billion investment in India between 2026 and 2030 (with an additional $13 billion specifically for expanding AI and cloud infrastructure in Mumbai and Hyderabad) is a huge driver for AWS partners and enterprises. It directly addresses: - **Data Residency Requirements**: AWS is expanding data center capacity locally in Mumbai and Hyderabad to help customers address performance, scalability, and data residency requirements (critical under India's DPDP Act and its upcoming final rules). - **AI Infrastructure**: The investment enables local deployment of AI workloads while keeping data within India. Let's look at what notes we should write or update: 1. **Japan APPI 2026 Amendments**: - Slug: `japan-appi-2026-amendments-diet-enactment` - We should update this note with the latest legislative status: Bill No. 54 was approved by the Cabinet on April 7, 2026, passed the House of Representatives (Lower House) on May 21, 2026, and was referred to the House of Councillors (Upper House) on June 12, 2026, where it currently sits awaiting a final vote before the extraordinary session ends on July 17, 2026. - We will detail the 12 key items under 4 categories, specifically highlighting: - The "Statistical Compilation, etc." exception for AI training data without consent (under strict conditions including public disclosure and pseudonymization). - Strict rules for "Specified Biometric Personal Information" (e.g., facial feature data) and children under 16 (requiring parental consent). - The introduction of an administrative surcharge system (gain-based, no turnover cap, applies to 1,000+ individuals, with a reasonable care defense). - Revised obligations for entrusted business operators (moving closer to a controller/processor distinction). 2. **South Korea PIPA Sweeping Amendments**: - Slug: `south-korea-pipc-prevention-transition-2026` - We should update this note with the extremely precise details from Yulchon and Substack: - Act No. 21445 was promulgated on March 10, 2026, and will take effect on September 11, 2026. - Detail the 10% total turnover fine cap (up from 3%) for repeated/serious violations. - Detail the new fine calculation policy announced by the PIPC (draft Enforcement Decree on March 16, 2026): fines are calculated based on the *larger* of the previous fiscal year's revenue and the 3-year average, and *no reductions* are allowed for very serious violations. - Detail the "possibility of a breach" trigger for notifications, the expansion of breach scope to include falsification/alteration/destruction, and the designation of the CEO as the "ultimate responsible person." - Note the Network Act amendments (Bill No. 14896, promulgated March 31, 2026, effective October 1, 2026) regarding CISO responsibilities and data breach fines. - Note the recent PIPC enforcement action (June 25, 2026) where cryptocurrency exchange Bithumb was fined 210 million won for cross-border data transfer violations. 3. **Multinational SaaS/IaaS Adaptation**: - Slug: `multinational-data-residency-adaptation-japan-korea-australia-2026` - We should update this note to include Amazon's massive $48 billion investment in India (announced June 2026) to expand cloud and AI infrastructure in Mumbai and Hyderabad, which is a direct response to India's DPDP Act residency and local AI training requirements. Wait, are there any other threads or watches? Let's review the threads/watches: 1. `Japan APPI 2026 Amendment Bill Final Passage` (watch, ID: `019eee70-d8ec-73d3-b939-b46c44da7bf0`): - Description: "Monitor the House of Councillors (Upper House) vote on the APPI amendment bill to confirm its official enactment into law, and track the publication of subsequent cabinet orders and PPC rules/guidelines." - Status: It has cleared the Lower House and was referred to the Upper House on June 12, 2026, but has not yet officially passed the Upper House as of June 29, 2026. So this watch is ongoing and does not resolve yet. I'll record an event to track that it passed the Lower House on May 21, 2026, and was referred to the Upper House on June 12, 2026, and set `resolves: false` (it's an ongoing watch until final passage). 2. `South Korea PIPA Amendments Effective Date` (watch, ID: `019ea65b-07fe-7c2e-9523-b76595db9abe`): - Description: "South Korea's sweeping PIPA amendments, authorizing fines of up to 10% of total revenue for severe data breaches, expanding reporting obligations to forgery/alteration, and designating the business owner/representative as the 'ultimate responsible person', come into effect on 2026-09-11." - Status: The effective date is September 11, 2026, which is in the future relative to our current date of June 29, 2026. So this watch is also ongoing and does not resolve yet. I'll record an event summarizing that the draft Enforcement Decree was announced on March 16, 2026, and set `resolves: false`. Let's write a note for `japan-appi-2026-amendments-diet-enactment`. Wait, let's double check if there's any other prior note on Japan. Yes, `japan-appi-2026-amendments-diet-enactment` exists in the list of notes. I will update it. Let's prepare the markdown body for the Japan APPI note. No YAML frontmatter. The title is the first `# ` heading, and the slug parameter is `japan-appi-2026-amendments-diet-enactment`. Let's draft the Japan APPI note body: ```markdown # Japan APPI 2026 Amendments: Bill No. 54 Advances to Upper House with AI Exceptions and Gain-Based Surcharges Japan is executing a major overhaul of its data protection framework under the **Act on the Protection of Personal Information (APPI)**. Approved by the Japanese Cabinet on April 7, 2026, and submitted to the 221st Extraordinary Session of the Diet as **Bill No. 54**, the legislation represents a strategic attempt to balance aggressive digital innovation (particularly in artificial intelligence) with targeted protections for highly sensitive personal data. The bill officially cleared the House of Representatives (Lower House) on May 21, 2026, and was referred to the House of Councillors (Upper House) on June 12, 2026, where it currently awaits a final vote before the Diet session concludes on July 17, 2026. If enacted, the amendments will come into force via Cabinet Order within two years of promulgation (by mid-2028). ## Key Pillars of the 2026 APPI Reform The amendments restructure Japan's privacy rules across four primary categories: ### 1. Promotion of Appropriate Data Utilization (The AI Exemption) The most controversial change is the introduction of a new **"statistical processing" exception** (Article 2, Paragraph 13; Article 30-2). This creates a consent-free pathway for companies to process and share personal data—including sensitive categories—for the sole purpose of statistical compilation and AI model training. - **Conditions**: To rely on this exception, companies must pseudonymize/de-identify the data, publicly disclose the intended processing, complete a formal Data Protection Impact Assessment (DPIA), contractually prohibit downstream recipients from re-identifying individuals, and restrict downstream use and onward transfer. - **Relaxed Consent Standard**: Consent is also exempted where handling is "clearly not contrary to the data subject's intentions" (Article 18, Paragraph 3, Item 7) or where there are "reasonable grounds" for not obtaining consent in life/property protection scenarios (Article 18, Paragraph 2). ### 2. Rules Corresponding Appropriately to Risks (Biometrics & Children) - **Specified Biometric Personal Information**: The bill creates a new category for "Specified Biometric Personal Identification Codes" (Article 16, Paragraph 5), covering facial features, fingerprints, DNA, voice, and gait. Businesses handling this data must provide advance public disclosures of its use and are strictly prohibited from using the opt-out mechanism for third-party transfers. - **Children's Data (Under 16)**: Explicit parental/legal guardian consent is now mandated for processing the data of minors under 16 (Article 40-2). The bill establishes a "best-interests" obligation for businesses handling children's data. - **Breach Notification Relief**: Broadening a risk-based approach, businesses may be exempted from notifying individuals in data breach scenarios if the PPC determines there is "little risk of inadequate protection" (e.g., if only internal, non-identifying IDs were leaked). ### 3. Prevention of Improper Use (Approach Restrictions) - **Contactable Personally Referable Information**: The bill bans the improper acquisition or use of non-personal identifiers that enable direct contact with individuals, such as email addresses, telephone numbers, and cookie/ad IDs (Article 31-2). ### 4. Rules for Securing Effectiveness (Gain-Based Surcharges) - **Administrative Surcharges**: In a major departure from the European GDPR's global turnover-based fines, Japan has introduced a **gain-based administrative surcharge system** (Article 148-3). Surcharges will equal the financial benefits or consideration obtained through illegal data handling. - **Thresholds**: Surcharges apply to serious violations affecting 1,000 or more individuals, and companies can assert a "reasonable care" defense to avoid penalties. Surcharges do not apply to general security management failures that do not generate direct revenue. - **Third-Party Service Provider Orders**: The PPC can now order third-party "handling-related service providers" (such as cloud hosts or DNS providers) to suspend services to non-compliant businesses (Article 148-2). ## Sources - [Proposed Amendments to the Act on the Protection of Personal Information (APPI) – Country Comparative Guides](https://www.legal500.com/guides/hot-topic/japan-proposed-amendments-to-the-act-on-the-protection-of-personal-information-appi/) — Legal 500 country overview of the 2026 APPI bill. - [Overview of the 2026 Amendments to the Act on the Protection of Personal Information](https://www.tmi.gr.jp/eyes/blog/2026/18425.html) — TMI Associates legal analysis of the 12 key amendment items. - [Japan: House of Representatives passes Bill to amend part of APPI](https://www.dataguidance.com/news/japan-house-representatives-passes-bill-amend-part) — OneTrust DataGuidance report confirming referral to the House of Councillors on June 12, 2026. - [Japan's New AI Data Law: What It Means for You](https://blog.gaijinpot.com/japans-new-ai-data-law/) — GaijinPot analysis of the political debate and "AI colony" concerns. - [Japan's APPI Overhaul Opens Personal Data to AI Training While Pricing Violations by the Profit They Earn](https://peopleofinternet.com/articles/japan-s-appi-overhaul-opens-personal-data-to-ai-training-whi.html) — People of Internet summary of the APPI reform's biometrics and surcharge rules. ``` Let's write this note using `write_note`. I will state my intent first.

I will now call `write_note` to update the standing findings for Japan's APPI 2026 amendments (`japan-appi-2026-amendments-diet-enactment`) with the latest legislative details from the House of Representatives vote and referral to the House of Councillors.

I will now write/update the South Korea PIPA note using the stable slug `south-korea-pipc-prevention-transition-2026`. I will state my intent first.

I will write/update the South Korea PIPA note (`south-korea-pipc-prevention-transition-2026`) with the highly precise legal details regarding the 10% total turnover fine cap, the PIPC's new fine calculation policy, and the CISO and Network Act amendments.

I will now write/update the Multinational SaaS/IaaS adaptation note using the stable slug `multinational-data-residency-adaptation-japan-korea-australia-2026`. I will state my intent first.