Every AI Policy Ever · open in the interactive register

Published (non-binding, current)Non-binding · Supervisory statement / letter

Alerts and Other Measures Concerning the Use of Generative AI Services

生成AIサービスの利用に関する注意喚起等について

Record JP-14

Issued by
Personal Information Protection Commission
Jurisdiction
Japan
Level · region
National · East Asia
Published / adopted
2023-06-02
Language
Japanese

Summary

Alert of the Personal Information Protection Commission on generative AI services, weighing individuals' rights against the public benefits of new technology. Businesses and administrative bodies entering personal information in prompts must confirm this stays within the specified purpose of use. If the data are then handled for purposes other than producing the response, a business acting without prior consent, or an administrative body, may breach the Act on the Protection of Personal Information, so both should check that the provider does not use them for machine learning. Users are warned that inputs may be used for training and outputs may contain inaccurate personal information.

Language

No English version of this instrument was found. The English title and the summary are the register's own, written from the sources below; for the exact wording use the Japanese text.

Safety topics

public-sector usegeneral-purpose / frontier AItransparency & labelling

Scope

Borderline scope Existing scope_note kept.

Status notes

Annex 2 summarises the alert the PPC issued on 1 June 2023 under Article 147 of the Act on the Protection of Personal Information to OpenAI, L.L.C. and OpenAI OpCo, LLC, which develop and provide ChatGPT: not to acquire sensitive personal information (要配慮個人情報) without consent, with four measures for information collected for machine learning; not to handle sensitive information entered by users who opted out of training; and to notify or publish the purposes of use in Japanese. The PPC said it would keep watching generative AI services and might issue further alerts.

Sources

Open the official source https://www.ppc.go.jp/news/press/2023/230602kouhou/

Local copy

Archived. Last attempt 2026-10-18 00:46:11 UTC

Official source (third-party copy, not published) archive/_runs/2026-10-14-discover-leads-2026-10-14/C019/2026-10-14/official.html
Retrieved 2026-10-14 13:11:35 UTC
SHA-256 5d59d980d38f9fe281ba529a3a5678fdd7f4bd5ad1f3990ba2e2a48384b641a0
Linked document (PDF) (third-party copy, not published) archive/JP-14/2026-10-18/document-1.pdf
Retrieved 2026-10-18 00:14:11 UTC
SHA-256 d5e86ce307b3010700ad838f531050bf83ff4093b5b8ad33ec72d3fae02ce1d6

Verification

A
The instrument's own official text, or an official register, was stored and confirms the title, date and status. checked 2026-10-18 · official-url-fetched
Recheck of 18 Oct 2026. Stored and read: the PPC's press page of 2 June 2023 on ppc.go.jp (copy of 14 Oct 2026, unchanged on 18 Oct 2026) and the notice itself (6 pages, copy of 18 Oct 2026: cover note, Annex 1 with the alert to businesses, administrative bodies and general users, Annex 2 with the summary of the alert to OpenAI). They confirm the title, the date (令和５年６月２日), the issuer, the addressees, the alert to OpenAI of 1 June 2023 under Article 147 and the content; the summary is written from the Japanese text. Version 1's summary applied the condition 'without consent' to administrative bodies too; Annex 1 attaches it only to businesses, so the sentence was corrected. No English version is linked from the press page or the notice, and nothing stored shows that the alert was withdrawn or replaced.
Second check: Independent check by Claude Code (claude-sonnet-5-5), 2026-10-18: 7 field(s) supported, fixes applied to scope_note.

History

  1. 2026-10-18scope_note: An alert (注意喚起) by Japan's data protection authority to businesses, public bodie → Existing scope_note kept. — pipeline run 2026-10-18-recheck-east-asia-1 (recheck), candidate JP-142026-10-18-recheck-east-asia-1 · Claude Code (claude-opus-5-5)
  2. 2026-10-18summary: Alert of the Personal Information Protection Commission on generative AI service → Alert of the Personal Information Protection Commission on generative AI service — Annex 1 (1)② makes input of personal data 'without the person's prior consent' a possible breach for businesses, while (2)② for administrative bodies has no consent condition; version 1 applied 'without consent' to both. The sentence now follows the text, and the advice to check that the provider does not use the data for machine learning, which both items give, is added2026-10-18-recheck-east-asia-1 · Claude Code (claude-opus-5-5)
  3. 2026-10-14Added to the register — found in pipeline run 2026-10-14-discover-leads-2026-10-14, candidate C019 (JP/ministries)2026-10-14-discover-leads-2026-10-14 · Claude Code (claude-opus-5-5)

Citation

Personal Information Protection Commission. Alerts and Other Measures Concerning the Use of Generative AI Services. 2023-06-02. https://www.ppc.go.jp/news/press/2023/230602kouhou/. Status: Published (non-binding, current); verified 2026-10-18 (level A). Local copy archive/_runs/2026-10-14-discover-leads-2026-10-14/C019/2026-10-14/official.html retrieved 2026-10-14 13:11:35 UTC, SHA-256 5d59d980d38f9fe281ba529a3a5678fdd7f4bd5ad1f3990ba2e2a48384b641a0. Every AI Policy Ever, version 1.18 (snapshot 2026-10-18), record JP-14.

Improve this record

Know of an amendment, a status change or an error? Report news or an error on GitHub; the form opens with this record filled in.