Aim of the Regulation

Japan’s APPI is designed to protect personal information and the rights of individuals, while also encouraging its responsible use to promote innovation and enhance economic and social well-being.

Who does it apply to?

The APPI covers all businesses operators, in Japan or abroad, that process personal information as part of providing goods or services to people in Japan.

Key Requirements

The APPI sets standards for how businesses collect, use, and protect personal information. It requires, amongst others, clear purpose limitation, strong security measures, careful handling of third-party and overseas transfers, and recognition of individuals’ rights to access and correct their information.

Overview of our compliance approach

Figma’s privacy program is built on internationally recognized data protection standards, which align closely with the principles of Japan’s APPI. This framework supports compliance by guiding how personal information is collected, used, protected, and governed across Figma’s services.

Refer to Figma’s Data Protection Addendum for more information.