On September 23, 2025, the final regulations proposed by the California Privacy Protection Agency (CPPA) were approved. These regulations address automated decisionmaking technology (ADMT), privacy risk assessments, cybersecurity audits, and related matters. The main elements of the final regulations are the following three items. (1) Automated Decisionmaking Technology (ADMT) ADMT refers to technology that processes …
On June 6, 2025, a law to partially amend the Payment Services Act was enacted.Under this amendment, cross-border payment collection agents—those who conduct international remittances for settling transactions in which they are not directly involved—will now be subject to the regulations applicable to Funds Transfer Service Providers. Examples: However, the amendment also provides an exclusion: …
PPC’s Q&A Q8-9 (translated by me) states as follows, but since there is no exception corresponding to Article 27(5)(i) of the APPI regarding outsourcing for third-party provision of personally referable information. So, in the case of personal data, a return of data from the contractor to the consignor would fall outside the scope of regulation …