Japan
5 regulators · 6 instruments · 6 obligations · 1 upcoming deadline
Japan is an industrial archipelagic state located in East Asia, and it is the fourth-largest economy in the world.
Regulatory pulse · 90 days
Laws & circulars Enforcement NewsOverview
VERIFIED 25 SEP 2026Japan is an industrial archipelagic state located in East Asia, and it is the fourth-largest economy in the world. Some of the major economic features of Japan include advanced manufacturing, excellent infrastructure, and good integration into the international trade system. Growth in the economy is relatively stable and consistent and is supported by structural improvement in private consumption, strong corporate performance, and substantial wage increases. In the medium to long term, there are some serious structural constraints that exist.
There is a lower risk of short-term financing for Japan because most of its national debt is in Japanese yen (JPY). The geopolitical risk for Japan has increased owing to rising tensions between the two countries, especially in terms of security of supply chains and contingency planning. The rising tensions between both nations have led to some retaliation against Japanese technology and automobile sectors, which has caused them to experience export controls on raw minerals. In terms of business, the risks that persist in Japan include low FDI inflows, tough labor laws, and vulnerability to natural calamities.
Japan’s governance is characterized by exceptional stability and democracy. This includes an independent judicial system, clear property rights, and low corruption. The public administration process is transparent; however, there is still regulatory scrutiny concerning political money raising, corruption in public procurement processes, and amakudari – the practice where bureaucrats, after retirement, join private corporations. Corporate governance reforms are currently being implemented to compel Japanese firms to become more transparent, stop cross-holdings, and increase ROE to attract foreign investment.
The legal landscape is complex and emphasizes preventive measures rather than reactionary ones. The Japan Financial Services Agency (FSA) implements tough anti-money laundering/countering the financing of terrorism (AML/CFT) controls that are fully consistent with the FATF global standards. Financial institutions and insurance companies need to conduct a proactive risk-based self-assessment, set up an extensive beneficial ownership validation process, and report Suspicious Transaction Reports (STRs). A unique national requirement demands that businesses identify "Anti-Social Forces" (ASF) and totally exclude such criminal organizations (Yakuza) from their operations.
Sanctions imposed by Japan's sovereign government are very stringent. Mainly enforced by the Ministry of Finance (MoF) through the Foreign Exchange and Foreign Trade Act (FEFTA), Japan's sanctions program is closely aligned with the UN and G7. Although Japan itself is not under any sanctions imposed by international organizations, it implements strict asset freeze policies and broad import/export ban measures. This is done mainly for international counter-terrorism and regime-specific purposes that include the countries of Russia, North Korea, and Iran. In regard to international companies, conducting a thorough Know Your Customer (KYC) check against the Japan MoF Sanctions List and corresponding US OFAC/EU watchlists is necessary.
Key laws & regulations
All Laws & Regulations →| Instrument | Type | Year | Regulator | Source |
|---|---|---|---|---|
| Japan's Corporate Governance Code | Guideline | 2015 | FSA | official |
| Payment Services Act | Act | 2009 | FSA | official |
| Act on Prevention of Transfer of Criminal Proceeds | Act | 2007 | JAFIC | official |
| Financial Instruments and Exchange Act (FIEA) | Act | 2006 | FSA | official |
| Act on the Protection of Personal Information (APPI) | Act | 2003 | PPC | official |
| No instruments match these filters. | ||||
Industry compliance
Essential obligations
All obligations →| Obligation | Timing | Regulator | Source | Detail |
|---|---|---|---|---|
| AML compliance programme and officer | Ongoing | JAFIC | source | |
In Japan, AML/CFT compliance program requirements and compliance officer responsibilities are statutory under the Act on Prevention of Transfer of Criminal Proceeds [JAFIC 1]. Moreover, this is closely monitored by the Financial Services Agency (FSA). Following the evaluation by FATF, Japan has adopted a stringent, risk-based system that makes regulated institutions responsible for identifying, assessing, and mitigating risks of money laundering and terrorist financing in their organizations. |
||||
| AML record retention | 7 years | JAFIC | source | |
In Japan, a tight seven-year period of document retention is required by the Act on Prevention of Transfer of Criminal Proceeds [JAFIC 1, JAFIC 2] and Financial Services Agency. Regulated entities are required to keep documents for seven years after ending relationship, completion of the transaction, or filing the suspicious transactions report [JAFIC 1]. |
||||
| Customer due diligence (KYC/CDD) | At onboarding + ongoing | JAFIC | source | |
Japanese legal framework for Customer Due Diligence and Know Your Customer is provided in the Act on Prevention of Transfer of Criminal Proceeds that is implemented by the Financial Services Agency and National Police Agency. The Act imposes an obligation on business operators to verify their clients' identities, determine beneficial owners with a stake of more than 25% of total corporate voting rights, and screen from antisocial groups. |
||||
| Suspicious transaction reporting | Event-based | JAFIC | source | |
According to Article 8 of the Act on Prevention of Transfer of Criminal Proceeds, the Japanese STR requirement is stringent and data-driven. Under this Act, all suspicious transactions in Japan are supposed to be reported without necessarily having a minimum amount set [JAFIC 1, JAFIC 2]. The requirement is enforced by the Financial Services Agency (FSA), but the reporting center is the Japan Financial Intelligence Center (JAFIC) under the National Police Agency. Therefore, all specified business operators should report suspicious transactions that involve criminal money laundering or terrorist activities, without necessarily setting a monetary threshold. The workflow should identify the customer's profile precisely and the geographical variations involved to facilitate the actionability of the report. It is illegal to tip off the customer about the report, while a person who fails to undergo the normal Customer Due Diligence is automatically treated as a reporting event. |
||||
| Lawful basis, notice and data subject rights | Ongoing | PPC | source | |
Within the Act on the Protection of Personal Information (APPI), Japan regulates an established framework for the protection of legal basis, privacy notice, and individual rights through the Personal Information Protection Commission (PPC). This regulatory model requires strict definition of the Purpose of Utilization, provides absolute erasure power to individuals on private data such as biometric data, and imposes permanent business compliance after recent changes. |
||||
| Personal data breach notification | Event-based | PPC | source | |
As per Article 26 of the Act on the Protection of Personal Information (APPI), Japan has implemented a stringent and continuous dual data breach notification requirement through its Personal Information Protection Commission (PPC). The organizations regulated under this policy have to comply with the mandatory dual filing process of reporting, wherein they are required to submit a preliminary report within 3 to 5 days from the discovery of an event if the breach of information involves sensitive care-required data, poses imminent financial risk, comes from cybercrime, or affects 1,000 people. At the same time, business organizations have to inform each of the affected data owners individually or provide public notice in cases where it becomes difficult to contact them. Under the amendments made to the APPI in 2026, the new enforcement model will shift from procedural guidelines to an effective administrative surcharge approach to impose heavy fines on companies not complying with the policy requirements. |
||||
| No obligations match these filters. | ||||