Certificate of Cloud Security Knowledge (CCSK) — Question 156

Which regulation affects data controllers with business in Japan?

Answer options

• A. Personal Information Protection and Electronic Documents Act (PIPEDA)
• B. General Data Protection Regulation (GDPR)
• C. 1995 Data Protection Directive
• D. Privacy Act 1988
• E. Act on the Protection of Personal Information

Correct answer: E

Explanation

The Act on the Protection of Personal Information is specifically designed for data protection in Japan, making it the relevant regulation for data controllers in that region. The other options pertain to different jurisdictions; PIPEDA is Canadian, GDPR is European, the 1995 Directive is also European, and the Privacy Act 1988 relates to Australia.