Cycle on Jul 6, 2026

I will start by listing the topic's open threads to see if there are any specific user-prioritized research questions or watches we need to address or track in this cycle.

I will search for the latest updates on the Japan APPI 2026 Amendment Bill final passage and the South Korea PIPA amendments (effective September 11, 2026) to see if there are any developments or if the Japan APPI bill has passed. Let's do a web search first.

I will fetch the `legal500.com` and `morihamada.com` articles to understand the status of the APPI amendment bill in Japan and if it has officially passed. I'll also do a search specifically for its passage status in June/July 2026. Let's start by fetching the Morihamada and Legal 500 pages.

I will search to see if the APPI 2026 Amendment Bill has been passed by the House of Councillors (Upper House) or enacted into law in June or July 2026, since the Japan Diet's 221st session was scheduled to end around July 17, 2026. Let's do a search.

Let's fetch the IAPP article "Navigating Japan's proposed APPI amendments: Key timelines, open issues and action points" to see if there is any more detailed information about the progress or expected passage of the bill. I will web-fetch this IAPP article.

I will search specifically for whether the Diet has passed the bill or if it is still pending in July 2026. Let's do a search on Google with terms like `Japan Diet pass "Act on the Protection of Personal Information"` or `"APPI"` or `"個人情報の保護に関する法律"` (the Japanese name for APPI) along with `2026` to see if there is news of its passage. Let's do a search.

Let's look at the linkedin post titled "Japan's Triennial Revision of the Personal Information Protection Act" or the Note article "Cabinet Decision on April 7, 2026: Strengthening Regulations on..." to see if they mention the progress. Also, let's search specifically for the status of the bill in the Diet in June or July 2026. Let's do a search.

Ah! The bill/cabinet-sponsored bill is "個人情報の保護に関する法律等の一部を改正する法律案（閣法第五四号）（衆議院送付）" (Cabinet Bill No. 54, sent from the House of Representatives). On June 19, 2026, there was a reference witness inquiry ("個人情報保護法改正案を参考人質疑") in the House of Councillors (参議院). Let's search about whether it has passed the House of Councillors (the National Diet's 221st session ends July 17, 2026) or if it has been enacted. Let's do a search.

Let's check the House of Representatives (衆議院) page on the passage history of the bill: `https://www.shugiin.go.jp/internet/itdb_gian.nsf/html/gian/keika/1DE26F2.htm` Let's see if we can fetch this URL or search for the latest date on it. Let's do a search on Google with `site:shugiin.go.jp/internet/itdb_gian.nsf/html/gian/keika/1DE26F2.htm` to see if there are any updates, or do a web search for its current status in the Sangiin (House of Councillors). Let's search.

Let's search for `個人情報の保護に関する法律等の一部を改正する法律案 参議院 経過` or `個人情報の保護に関する法律等の一部を改正する法律案 成立` to see if it passed in late June or early July 2026. Let's search.

Let's check the Sangiin page for the bill: `https://www.sangiin.go.jp/japanese/joho1/kousei/gian/221/meisai/m221080221054.htm` Let's fetch this URL to see if it lists a final vote or passage date. This will tell us whether it has officially passed. Let's fetch it.

The Sangiin page was updated as of June 17, 2026, and lists the bill as having been referred to the "デジタル社会の形成及び人工知能の活用等に関する特別委員会" (Special Committee on the Formation of a Digital Society and the Utilization of Artificial Intelligence, etc.) on June 12, 2026. Let's see if there is any newer update. Let's do a search on Google for `"個人情報の保護に関する法律等の一部を改正する法律案"` or `"閣法第54号"` along with `可決` or `成立` or `参議院` in June or July 2026. Let's search.

Let's check if there are any news articles about the Sangiin passing the bill or the bill's final passage. Let's do a search on Google with `freshness="month"` or `freshness="week"` to see if there is any recent news about the APPI bill passing in the Sangiin. Let's do a search.

The bill is currently being actively debated in the Sangiin (House of Councillors) as of early July 2026. The Asahi Shimbun article "AI開発なら同意不要 病歴も渡りうる個人情報保護法改正案の危うさ" (July 5, 2026) shows that the bill is still in the Sangiin being discussed and has not yet completed its final passage as of July 5/6, 2026. Let's see if we can find any details about South Korea's PIPA amendments that are scheduled to go into effect on September 11, 2026. Let's do a search on Google for South Korea PIPA amendments effective September 2026 PIPC.

The South Korea PIPA amendments were promulgated on March 10, 2026, and are scheduled to take effect on September 11, 2026. Let's fetch the Yulchon article to understand the details of South Korea's PIPA amendments. I will fetch `https://www.yulchon.com/en/resources/publications/newsletter-view/43667/page.do` using web_fetch.

The search tool is exhausted, which is perfectly fine because we have retrieved the exact, highly detailed legal updates for both Japan's APPI 2026 Amendment Bill (which is currently under active debate in the Sangiin/House of Councillors after passing the House of Representatives on May 26, 2026) and South Korea's PIPA/Network Act amendments (promulgated on March 10, 2026, and scheduled to take effect on September 11, 2026). Let's carefully analyze the information we gathered: 1. **Japan APPI 2026 Amendment Bill**: - Status: Approved by the Cabinet on April 7, 2026. Passed the House of Representatives (衆議院) on May 26, 2026. Currently under active, highly debated review in the Sangiin (House of Councillors / Upper House) as of June/July 2026. The 221st Diet session runs until July 17, 2026. - Core changes: - Promotes appropriate data use (deregulation): A new consent exemption for "Creation of statistical information, etc." (including AI development/training data, such as web scraping of sensitive care-required personal information and third-party sharing under strict written agreements, transparency, and no-redistribution requirements). Also relaxes general consent requirements where processing clearly does not prejudice rights (such as travel bookings or bank transfers) and eases the "difficulty" requirement to "reasonable grounds." - Risk-based regulatory measures: Categorizes facial feature data as "Specific Biometric Personal Information," requiring advance notices/disclosures, banning opt-out third-party provision, and granting individuals unconditional rights to demand deletion or suspension of use. - Protections for children: Parental consent required for children under 16, with enhanced rights to request deletion or suspension of use without meeting adult thresholds. - Entrusted data processors (outsourcing): Significant regulatory relief, exempting processors from most general APPI obligations if a robust contract is in place and followed (retaining only security management, breach reporting, and no use beyond the entrusted scope). - Streamlined data breach notifications: Exemption from direct notification to individuals if the breach is deemed "low risk" under PPC regulations and alternative measures (like public announcement) are taken. - Enhanced enforcement/fines: First-time administrative monetary penalty (fine) system to confiscate ill-gotten gains for target violations (like illegal third-party provision or misuse of statistical processing). Fines are multiplied by 1.5 for repeat offenders within 10 years, and a 50% leniency discount applies for voluntary self-reporting before investigation. Expanded PPC order-making authority. 2. **South Korea PIPA & Network Act 2026 Amendments**: - Promulgated as Act No. 21445 on March 10, 2026. - Effective Date: September 11, 2026 (except ISMS-P mandatory provisions which take effect July 1, 2027). - Core changes: - Sweeping PIPA amendments that restructure enforcement. - Authorizes severe administrative fines of up to 10% of total revenue for severe data breaches. - Designates business owners or representatives (CEOs) as the "ultimate responsible person," making them personally responsible for data breaches. - Revises Enforcement Decree (announced draft March 16, 2026) to details fine reductions and revenue calculation. - Network Act Amendments (promulgated March 31, 2026, taking effect October 1, 2026): Expands responsibilities of the Chief Information Security Officer (CISO), establishes administrative fines for network data breaches, and tightens commercial spam controls. Let's check the current notes on our topic using `read_notes`.

Let's review the slugs that exist: - `japan-appi-2026-amendments-diet-enactment` (Japan APPI 2026 Amendments: Bill No. 54 Advances to Upper House with AI Exceptions and Gain-Based Surcharges) - updated June 29, 2026. - `south-korea-pipc-prevention-transition-2026` (South Korea Promulgates Sweeping PIPA Amendments: 10% Revenue Fines, CEO Liability, and Fine Calculation Overhaul) - updated June 29, 2026. I will update both of these slugs with our new findings to make sure they are fully accurate and up to date, capturing the June/July 2026 Sangiin (House of Councillors) status for Japan and the detailed draft Enforcement Decree and Network Act (promulgated March 31, 2026) for South Korea. Let's write the note for Japan first using `write_note` on `japan-appi-2026-amendments-diet-enactment`. Wait, let's look at the existing title or content. The existing slug is `japan-appi-2026-amendments-diet-enactment`. I'll write the revised note with the exact Sangiin updates and details. Let's do that.

Now let's update the South Korea note using the slug `south-korea-pipc-prevention-transition-2026`. I will write the updated note with the exact promulgation details, the September 11, 2026 effective date, the draft Enforcement Decree details, and the Network Act amendments promulgated on March 31, 2026. Let's do that.

I will now review the threads to see if they can be resolved or if we need to update/register a watch for the future. Let's see: 1. Thread `019eee70-d8ec-73d3-b939-b46c44da7bf0` ("Japan APPI 2026 Amendment Bill Final Passage") is a watch. The trigger describes monitoring the House of Councillors vote. Since the bill is still actively being debated in the House of Councillors as of late June/early July 2026 (the Diet session ends July 17, 2026), it has not officially passed yet. So we should keep this watch active and *not* resolve it yet. Wait, let's record an ongoing event or just leave it. Since it hasn't passed yet, the watch is still open. 2. Thread `019ea65b-07fe-7c2e-9523-b76595db9abe` ("South Korea PIPA Amendments Effective Date") is a watch with fire_date `2026-09-11T00:00:00Z`. Since current time is `2026-07-06`, the effective date of September 11, 2026 has not yet arrived. So this watch should remain active as well. Since we have updated our findings with the latest primary sources, let's finish the cycle. I will call `finish_cycle`.

I have successfully completed the research cycle. ### Summary of Findings & Updates: 1. **Japan APPI 2026 Amendments (`[[japan-appi-2026-amendments-diet-enactment]]`)**: - **Diet Progress**: The Cabinet-sponsored Bill No. 54 passed the House of Representatives (衆議院) on May 26, 2026. As of late June and early July 2026, it is actively being debated in the House of Councillors (参議院 / Upper House) under the *Special Committee on the Formation of a Digital Society and the Utilization of Artificial Intelligence, etc.*, ahead of the scheduled end of the Diet session on July 17, 2026. - **Key Provisions Detailed**: Added granular details on the new consent exemption for statistical/AI processing (Article 30-2), biometric data controls (Article 16(5)), children's data under 16 (Article 40-2(1)), and the first-of-its-kind gain-based administrative surcharge system (Article 148-3). 2. **South Korea PIPA & Network Act Amendments (`[[south-korea-pipc-prevention-transition-2026]]`)**: - **Enforcement Timeline**: The sweeping PIPA amendments (Act No. 21445) promulgated on March 10, 2026, are on track to take effect on **September 11, 2026**. - **Enforcement Decree & Network Act**: Outlined the PIPC's March 16, 2026 draft Enforcement Decree detailing the 10% total revenue fine calculation and mitigating criteria. Integrated the complementary **Network Act amendments** (promulgated March 31, 2026; effective October 1, 2026) which expand CISO responsibilities and implement strict commercial spam controls.