ABSTRACT

This chapter discusses the international aspects of personal data protection law. It discusses the geographical scope of the European Union’s General Data Protection Regulation and the Japanese Act on the Protection of Personal Information, highlighting that there is still a lack of discussion on the Japanese Act on the Protection of Personal Information. The chapter then examines the impact of the General Data Protection Regulation and Act on the Protection of Personal Information as they relate to foreign companies. The effect of response measures on foreign companies is examined. They are categorized by the nature of the measures taken towards the breach and assessed from a private international law perspective.