// Privacy
APPI Compliance Software
Japan's data protection law governing the handling of personal information.
Framework at a glance
Short name
APPI
Version
2022
Category
Privacy
Controls
24
What APPI covers
24 controls across 6 domains — every one tracked, owned and evidenced in Cyber Horizon.
Handling of Personal Information
4 controls- Art.17 Specification of Purpose of Utilisation
- Art.18 Restriction on Use Beyond Purpose
- Art.19 Prohibition of Improper Use
- Art.22 Accuracy and Deletion of Data
Acquisition of Personal Information
3 controls- Art.20(1) Proper Acquisition
- Art.20(2) Consent for Special Care-Required (Sensitive) Information
- Art.21 Notification of Purpose upon Acquisition
Data Security
4 controls- Art.23 Security Control Measures
- Art.24 Supervision of Employees
- Art.25 Supervision of Trustees
- Art.26 Data Breach Reporting to the PPC
Provision to Third Parties
5 controls- Art.27(1) Restriction on Third-Party Provision
- Art.27(2) Opt-Out Procedure for Third-Party Provision
- Art.28 Cross-Border Transfer to a Third Party in a Foreign Country
- Art.29 Records of Provision to a Third Party
- Art.30 Confirmation and Records on Receipt from a Third Party
Rights of Individuals
5 controls- Art.32 Public Notice of Matters on Retained Personal Data
- Art.33 Disclosure of Retained Personal Data
- Art.34 Correction, Addition or Deletion
- Art.35 Cessation of Use and Third-Party Provision
- Art.40 Handling of Complaints
Processed Information
3 controls- Art.41 Pseudonymously Processed Information
- Art.42 Provision of Pseudonymously Processed Information
- Art.43 Anonymously Processed Information
How Cyber Horizon automates APPI
Every APPI control lives in a shared control library, crosswalked to the other frameworks you run — evidence collected once counts everywhere it applies.
Evidence is collected automatically from your connected tools, with owners, review cadences and gaps tracked continuously instead of at audit time.
Audit packs generate on demand, and the risk register, vendor risk and threat intelligence sit in the same platform — one evidence trail across your whole programme.
Frequently asked questions
What is APPI?
Japan's data protection law governing the handling of personal information.
How many controls does APPI have?
APPI (2022) has 24 controls in Cyber Horizon's catalogue, organised across 6 domains.
How does Cyber Horizon help with APPI?
Cyber Horizon maps APPI into a shared control library alongside every other framework you run, so evidence collected once counts towards APPI and everything else it overlaps with. Controls, evidence status and audit packs live in one place, with automated collection from your connected tools.
More Privacy frameworks
See APPI mapped to your environment
Start with the free 20-question readiness check — no signup — or get a personal walkthrough of APPI in Cyber Horizon.