Freedom on the Net 2019 - Japan

FREE
73
/ 100
Obstacles to Access 21 / 25
Limits on Content 28 / 35
Violations of User Rights 24 / 40
LAST YEAR'S SCORE & STATUS
75 / 100 Free
Scores are based on a scale of 0 (least free) to 100 (most free)
 
 

Overview

For the third consecutive year, internet freedom declined in Japan. The murder of a prominent blogger and ongoing concerns about government surveillance have contributed to the deterioration, though the environment remained relatively open overall. There are few obstacles to internet access in Japan, and the legal framework provides strong protections for various forms of expression.

Japan is a multiparty parliamentary democracy. The ruling Liberal Democratic Party (LDP) has governed almost continuously since 1955, with stints in opposition from 1993 to 1994 and 2009 to 2012. Political rights and civil liberties are generally well respected.

Key Developments, June 1, 2018 – May 31, 2019

  • In June 2018, the prominent blogger and cybercrime expert Kenichiro Okamoto was stabbed to death in Fukuoka (see C7).
  • With the aim of strengthening cybersecurity ahead of the 2020 Summer Olympics in Tokyo, the National Operation Towards IoT Clean Environment (NOTICE) program will allow authorities to attempt to hack into 200 million internet-connected devices, despite significant privacy concerns raised by civil society groups and ordinary users (see C5 and C8).
  • Officials continued their attempts to expand their authority to block websites, but these efforts have been constrained by the constitutional right to secrecy of communications (see B3).
  • A range of users have been arrested and charged under a 2011 law criminalizing the creation and use of computer viruses without a legitimate reason, resulting in fines and at least one suspended prison term (see C3).
 
 

A Obstacles to Access

In general, Japanese internet users experience few obstacles to access. There are high rates of internet penetration, and smartphone use is increasing. Wi-Fi and mobile options are expanding in advance of the 2020 Summer Olympics in Tokyo.

A1 0-6 pts
Do infrastructural limitations restrict access to the internet or the speed and quality of internet connections? 6 / 6

Thanks in part to strong infrastructure, internet access is widely available to users in Japan. The Inclusive Internet Index 2019 report ranks Japan at 12 out of 100 countries in terms of availability, determined by quality and breadth of available infrastructure.1 Internet usage decreased slightly in 2017.2 According to the latest government figures, 59 percent of users accessed the internet with a computer in 2016, down from 79 percent in 2011.3 The use of smartphones to access the internet dramatically increased over the same period; smartphones were the primary means of internet access for 58 percent of users at the end of 2016.4

Providers continue to develop infrastructure, in part to alleviate mobile network congestion. Four mobile operators expect to start testing fifth-generation (5G) network technology in 2019, with the goal of launching it commercially in 2020.5 The government has also invested heavily in Wi-Fi networks in advance of the 2020 Olympics.6 Some companies offer free Wi-Fi, including the private company Wire and Wireless (Wi2), part of the KDDI group, which provides free internet access in restaurants, coffee shops, and train stations; registration requires an email address.7 Wi-Fi access has been tied to mobile subscriptions in the past, which presents a barrier for users without contracts.8

Connectivity is occasionally restricted accidentally or due to network congestion and server outages. Subscribers with the service providers KDDI and Nippon Telegraph and Telephone (NTT) reported an apparent outage in August 2017 that was caused by human or technical error. It was resolved after 23 minutes.9 Infrastructure was also severely damaged in 2011, when an earthquake and tsunami hit Japan’s east coast, triggering the destruction of a nuclear power plant in Fukushima. Many people lost service for days or weeks, and mobile phone usage dropped by almost half in the affected areas.10

A2 0-3 pts
Is access to the internet prohibitively expensive or beyond the reach of certain segments of the population for geographical, social, or other reasons? 2 / 3

Access to the internet remains relatively equal across different segments of the population. Increasing smartphone use has made the mobile market more competitive and resulted in improved pricing options, although the cost of service can otherwise be quite high.

According to the Inclusive Internet Index 2019 report, Japan ranks 13 out of 100 countries surveyed for affordability, defined by cost of access relative to income and the level of competition in the internet marketplace.11 Government statistics show that the average cost of internet access for households with two or more people across Japan was ¥3,753 ($34) in 2017, compared with ¥2,168 ($20) in 2014.12 But there are also sharp regional disparities in average costs per household, with major cities being the most expensive in 2017, at around ¥4,000 per month, while small cities, towns, and villages averaged almost ¥300 per month. Connectivity for households in the heavily populated Kantō region, which includes Tokyo, cost nearly ¥1,400 ($13) more per month than in the least expensive region, Tohoku in the northeast.13 Many providers bundle digital media subscriptions, including cable television, Voice over Internet Protocol (VoIP), and email, pushing costs higher.

Access is well distributed across the population, though it is less common among the elderly.14 Mobile phone operators are expanding their market for handsets designed for children and the elderly, including easy-to-use, large-button phones.

A3 0-6 pts
Does the government exercise technical or legal control over internet infrastructure for the purposes of restricting connectivity? 6 / 6

Japan’s telecommunications infrastructure is advanced, and there have been no reports of the government deliberately disconnecting telecommunications service. There is full competition in the ownership of gateways to the international internet.15 Historically, Japan’s internet connections were forged through cooperation among government agencies (including then government-owned NTT), universities, and national research institutions.16

A4 0-6 pts
Are there legal, regulatory, or economic obstacles that restrict the diversity of service providers? 5 / 6

While users have a choice of providers for internet services, certain companies dominate the market.

Japan has three major mobile operators—Au, a KDDI brand; NTT’s Docomo; and Softbank. All use the CDMA (code-division multiple access) wireless network method or a variant. The NTT group remains dominant in practice, though hundreds of other providers offer services including fiber-optic connections and fixed or wireless broadband access.17 A new player, the e-commerce company Rakuten, which seeks to become the fourth major mobile carrier, was granted wireless spectrum to launch its own network in 2017.18 In November 2018, Rakuten announced a partnership with KDDI that will allow it to use the latter company’s network.19 Rakuten planned to begin offering mobile services in October 2019,20 but a full-scale launch has been delayed until April 2020.21 The government expects this development to lower costs across the market. No major foreign operators have successfully penetrated the telecommunications market independently.

NTT, formerly a state monopoly, was privatized in 1985 and reorganized in 1999 under a law promoting functional separation between the company’s mobile, fixed-line telephony, and internet services.22 Asymmetric regulation, which creates stricter rules for carriers with a higher market share, has helped diversify the industry.23

Beginning in 2014, the government required mobile phone carriers to unlock SIM cards if users request it; this has made it easier for users to switch mobile providers and use third-party prepaid SIM cards.24 Although that year’s new guidelines from the Ministry of Internal Affairs and Communications (MIC) were subject to criticism, they helped address concerns that the cost of switching providers favored the dominant players and created a barrier for new entrants to the market.25 Besides benefiting Japanese consumers,26 the change is expected to permit better access for the influx of tourists to Japan during the 2020 Olympics.27

A5 0-4 pts
Do national regulatory bodies that oversee service providers and digital technology fail to operate in a free, fair, and independent manner? 2 / 4

The telecommunications, internet, and broadcast sectors are regulated by the MIC rather than an independent commission. Some self-regulatory bodies also manage content and other issues.

Observers argue that the industry has generally improved since the 2001 establishment of the MIC, which resulted from the merger of the Ministry of Home Affairs, the Ministry of Posts and Telecommunications, and the government’s Management and Coordination Agency.28

Nongovernmental organizations (NGOs) supported by the relevant companies in these three sectors perform a self-regulatory function. They include television’s Broadcasting Ethics and Program Improvement Organization and the Internet Content Safety Association, which manages blocking of child sexual abuse images online.29 Observers have accused MIC officials of trying to restrict or influence content under the broadcast law.30

B Limits on Content

Following the government’s controversial move in early 2018 to ask internet service providers (ISPs) to block manga piracy sites, authorities indicated that they planned to introduce new legislation to expand the scope of website blockingJapan’s online environment continued to feature an abundance of diverse content. A Tokyo newspaper reporter faced pressure from the government, but social media users mobilized to defend him and the principles of press freedom in general.

B1 0-6 pts
Does the state block or filter, or compel service providers to block or filter, internet content? 5 / 6

Authorities typically do not directly censor online content in Japan. However, in April 2018, the government asked ISPs to block manga piracy sites, prompting a public debate that highlighted tensions between the protection of intellectual property on one hand and users’ rights to private communications and the constitutional ban on censorship on the other.31 Three of the main sites targeted were Mangamura, AniTube!, and MioMio.32 The move raised serious concerns over whether the blocking was constitutionally allowed, and the government has since indicated that it would introduce legislation to broaden its blocking authority (see B3).

B2 0-4 pts
Do state or nonstate actors employ legal, administrative, or other means to force publishers, content hosts, or digital platforms to delete content? 3 / 4

Courts have continued to consider lawsuits from individuals requesting that search engines delink inaccurate or irrelevant material about them from public results, but the Supreme Court has laid down important guidance that set limits on such “right to be forgotten” removals.

In recent years, content removals have focused on hate speech and illegal content, including child sexual abuse images and “revenge porn”—explicit images shared without the consent of the subject. The Tokyo-based Safer Internet Association reported that it had been asked to deal with over 4,181 cases of revenge porn in 2017, and had secured the deletion of the content in 3,319 (79 percent) of those cases.33

Inflammatory, nationalist speech targeting Japanese residents of Korean origin and other minority groups is also subject to removal. In 2017, the Japanese video website Niconico Dōga took down two videos posted from an IP address in Osaka after municipal officials flagged them for violating a local ordinance regulating hate speech.34 In 2016, Makoto Sakurai, a personality known for anti-Korean rhetoric, opened a channel on the online television station AbemaTV; a rush of online criticism followed, and the channel was deleted.35

The Internet Hotline Center received 537,721 reports of potentially illegal or harmful content in 2018, slightly fewer than the previous year. However, the center’s analysis showed that the rates of content found to be illegal or harmful increased.36

Service providers protect themselves from civil liability by adhering to voluntary guidelines on takedown requests.37 The 2001 Provider Liability Limitation Act directed ISPs to establish a self-regulatory framework to govern takedown requests involving illegal or objectionable content, defamation, privacy violations, and copyright infringement.38 In 2002, industry associations produced guidelines designed to protect ISPs from legal liability within the jurisdiction of the Japanese courts. Under the guidelines, anyone can report material that infringes directly on their personal rights to the service provider, either to have it removed or to find out who posted it. No third party can do so. The provider notifies the individual who posted the content and fulfills the request with the poster’s permission—or without it if the individual fails to respond. If the poster refuses permission, the service provider is authorized to assess the complaint and act on it if it is deemed legitimate. In this scenario, an ISP could give the complainant information to identify the poster—such as their name or IP address—without that person’s consent, raising privacy concerns.

B3 0-4 pts
Do restrictions on the internet and digital content lack transparency, proportionality to the stated aims, or an independent appeals process? 3 / 4

While the government is relatively transparent in its censorship decisions, recent blocking and efforts to give authorities more censorship power have raised concerns. Some private companies occasionally accept the government’s requests to remove content.

For ISPs to block particular websites, they must monitor their customers' online activity to determine whether they are accessing the sites in question, which could violate the constitutional right to secrecy of communications.39 Following the government’s effort to block manga piracy sites in early 2018, observers expressed concern that the move conflicted with the Telecommunications Business Act and the constitutional ban on censorship.40 Shortly after NTT announced that it would comply with the government’s request, a customer sued the company on the grounds that the blocking violated privacy guarantees.41

In the wake of the blocking attempts, the government indicated that it would introduce new legislation to expand its authority to formally order blocking, which current law allows only for sites found to host child sexual abuse images.42 In June 2018, the government convened a panel to review potential legislation targeting websites that host pirated content. The panel allegedly suspended its efforts in October after failing to reach consensus on whether the blocking would violate the constitutional right to secrecy of communications.43

ISPs voluntarily filter child sexual abuse images, and many offer parents the option to filter certain other content to protect young internet users.44 Depictions of genitalia are pixelated to obscure them for internet users based on a common—though poorly articulated—interpretation of Article 175 of the penal code, which governs obscenity.45 Otherwise, individuals or police ask ISPs to administratively delete contested or illegal content. A 2014 law addressed the issue of content removal and revenge porn (see B2). Under that law, providers must comply with takedown requests within two days.46

The threat of official content restrictions looms periodically during public debates about child safety, though carriers and content producers have successfully resisted intrusive regulation. In 2007, the MIC ordered mobile operators to install filtering software that would enable parents to control the content seen by their children. A coalition of groups, including the Japan Internet Providers Association and the user rights organization Movement of Internet Active Users, lobbied against the mandate, and mobile users can now select voluntary filters.47

“Right to be forgotten” cases increased around the same time as a landmark 2014 decision on the topic by the Court of Justice of the European Union. Until early 2017, there was no similar legal guidance in Japan. However, the Japanese Supreme Court that year ruled in favor of Google and established criteria for delisting search results.48 In this case, a man asked Google to remove search results documenting a crime he committed over five years earlier.49 The court stated that “removal of information can be demanded only when privacy protection concerns clearly outweigh the public’s interest in the disclosure of information online.”50 The court indicated that points such as the content of the search results, the scope of disclosure, the social status of the persons involved, the “social situation,” and the “necessity of disclosing facts” were critical in deciding whether search engine results should be removed.51

Courts have also ordered content to be removed in defamation cases. In a 2015 lawsuit, the Tokyo High Court ordered Yahoo Japan to delete 11 search results that linked a man’s name to criminal behavior. The man had originally argued that he was defamed by false information.52

The Internet Hotline Center, operated through the Safer Internet Association as part of a contract with the National Police Agency (NPA), cooperates with ISPs to solicit reports of illegal or harmful content from the public.53 The center’s website offers online forms for reporting objectionable content, such as material that features obscene images, child sexual abuse images, illegal drugs, or prostitution, as well as a referencing system that allows users to look up the status of submitted reports. Beginning in 2016, the Internet Hotline Center also provided reports to “Safe-line,” a website maintained by the Safer Internet Association.54 Once the association receives a report, it will either file a police report or make a request for removal to the relevant domestic or overseas provider.55

B4 0-4 pts
Do online journalists, commentators, and ordinary users practice self-censorship? 3 / 4

Japanese citizens exercise some self-censorship online, often on historical and social issues. The society at large prefers “harmony,” and people avoid criticizing the role of Japan’s emperor, especially when connected with historical events like World War II. Individuals and public figures who break this social convention risk censure and even attacks from right-wing extremists, who notoriously attempted to assassinate the mayor of Nagasaki on these grounds in 1990. Though exceptional, such incidents still exert a chilling effect on Japanese expression.

In a 2017 report, the UN special rapporteur on freedom of expression noted that there were “significant worrying signals” regarding self-censorship among journalists on issues such as the 2011 Fukushima nuclear disaster.56 There is also a degree of self-censorship concerning human rights problems, in some cases linked to instances of apparent political pressure.57

European Union, October 16, 2017, https://www.consilium.europa.eu/media/21513/st12816en17-ar.pdf.

B5 0-4 pts
Are online sources of information controlled or manipulated by the government or other powerful actors to advance a particular political interest? 2 / 4

Progovernment online commentators are prevalent across Japan. For example, the Jiminto (Liberal Democratic Party) Net Supporters Club (J-NSC), organized in 2010, had about 19,000 members as of 2017. The group essentially serves as an online public relations effort for the LDP, though its rules make clear that members are responsible for their own social media posts. Such posts have attacked critics of the LDP government and have at times initiated negative campaigns against opposition lawmakers.58

Political bots, or automated accounts, have also permeated the Japanese internet. Analysis of about half a million sample tweets posted before and after Japan's 2014 general elections revealed that most posts were near-duplicates or retweets of those posted by bots, including many that disseminated nationalist or progovernment messages.59 Ahead of the Okinawa gubernatorial election in September 2018, misinformation again spread online.60 To help limit its effectiveness, two local dailies instituted fact-checking processes.

There are some known cases of the government or powerful groups proactively manipulating online news or other content. In one significant instance, government officials and the Tokyo Electric Power Company (TEPCO) withheld data about pollution after the 2011 Fukushima nuclear disaster. The MIC requested that four industry associations monitor false or unsubstantiated content circulating about the disaster online. Some observers said this was an attempt to control public discourse, though deletions were not widespread. Media scrutiny of reportage involving the 2011 disaster has continued. In 2016, articles appearing in major Japanese news outlets described government officials pressuring TEPCO not to use the term “meltdown” at a news conference shortly after the accidents at the Fukushima Daiichi nuclear plant.61 In May 2019, it was revealed that the government and Fukushima Prefecture had paid over ¥24 billion ($215 million) to an advertising agency to manage public relations, including in online outlets, after the disaster.62

B6 0-3 pts
Are there economic or regulatory constraints that negatively affect users’ ability to publish content online? 2 / 3

Independent online media and citizen media outlets have faced obstacles in their work, particularly due to kisha clubs—formal press associations, for reporters covering institutions such as government ministries or major corporations, that are only open to traditional media companies. In addition, some online news outlets struggle to sustain themselves financially.

Kisha clubs and an advertising market that favors established players may be preventing digital media from gaining a stronger foothold in the market. Kisha clubs provide essential access to officials in Japan, but they have been accused of denying such access to young journalists and new media outlets; the system may also limit some reporters’ access to certain locations, such as areas affected by the 2011 Fukushima disaster. 63 In 2017, the UN special rapporteur for freedom of expression continued to criticize the kisha club system.64

B7 0-4 pts
Does the online information landscape lack diversity? 4 / 4

Japan has a diverse online landscape. YouTube, Twitter, Facebook, and international blog-hosting services are freely available, as are popular local platforms like Niconico Dōgathe video-sharing site, and LINE, a chat application that was launched in Japan in 2011. Blogs have a significant impact on public opinion, and several independent journalists are becoming influential through personal or commercial websites and social media accounts. However, most online media remain small and community based.65

B8 0-6 pts
Do conditions impede users’ ability to mobilize, form communities, and campaign, particularly on political and social issues? 6 / 6

Digital activism in Japan has been highly effective at both the local and the national level, and online mobilization tools are freely available.

Online grassroots movements emerged in the mid-1980s, when local community networks organized to protest deforestation in Zushi, Kanagawa Prefecture,66 and Renkon NeT promoted civic monitoring of radiation levels nationwide.67 In 1993, the nonprofit ISP Japan Computer Access for Empowerment (JCAFE) was set up to support social movements and NGOs. It ran workshops and demonstrations and offered server space, site rental, email hosting, and bulletin boards.68 Since then, many forms of digital activism have taken on social issues.

A number of initiatives sprang up in response to the Fukushima disaster. These included interactive maps to share public information about disaster relief,69 the use of Google’s “Person Finder” web application to facilitate rescue and recovery,70 and the online organization of large demonstrations and protests against nuclear energy.

During the coverage period, users rallied behind a Tokyo Shimbun reporter who had been targeted by the government. In February 2019, the Cabinet Office reportedly sent a letter demanding that the reporter be “restricted” from asking questions at press events. In response, hashtags such as “Tokyo Shimbun reporter restricted from asking questions,” “toward a country where we can freely ask questions,” and “we have the right to know” trended on Twitter.71 An online petition in support of the journalist also gathered more than 17,000 signatures.72

C Violations of User Rights

While arrests under the copyright law are periodically reported, this coverage period featured cases in which individuals were charged and convicted for allegedly using site visitors’ computers to mine cryptocurrencies without their consent. Meanwhile, a change in the country’s legal framework allowed for a new program in which authorities would attempt to hack into 200 million internet-connected devices, despite privacy concerns raised by civil society and ordinary users alike. In the most disturbing development of the coverage period, a prominent blogger was murdered, apparently by a man who had harassed him online.

C1 0-6 pts
Do the constitution or other laws fail to protect rights such as freedom of expression, access to information, and press freedom, including on the internet, and are they enforced by a judiciary that lacks independence? 5 / 6

Article 21 of Japan’s constitution prohibits censorship and protects freedom of “speech, press, and all other forms of expression,” as well as the “secrecy of any means of communication.”73 These rights are generally upheld in practice, though some social and legal constraints exist, and several laws have negative implications for free speech.

The Act on the Protection of Specially Designated Secrets came into force in 2014, despite objections from the opposition, civil society, and protesters. The law gives a range of officials the discretion to indefinitely restrict public information pertaining to national security.74 Overseen by government officials rather than an independent body, it offers no protection for whistle-blowers who reveal wrongdoing.75

A 2016 law outlined measures that authorities could take to educate the public about hate speech while also combating such speech when directed against people of overseas origin and their descendants.76 The drafters of the legislation struggled to balance restrictions on racial and ethnic slurs with freedom of expression guarantees in the constitution,77 and the law did not actually ban or penalize hate speech, leading some critics to argue that it would be ineffective as a result.78 In 2017, several municipalities asked for a clearer definition of hate speech under the law.79

Some city governments have also introduced local ordinances on hate speech, including the government of Osaka in 2016. Osaka’s ordinance authorized the public identification of groups that disseminate hate speech, defined as “communication which defames and aims to exclude a particular group based on race or ethnicity,” including through “online transmission,” according to news reports.80

C2 0-4 pts
Are there laws that assign criminal penalties or civil liability for online activities? 2 / 4

A number of laws regulate online activity, including by imposing civil and criminal liability. Under the Act on the Protection of Specially Designated Secrets, intentional leaks can draw penalties of up to 10 years in prison, while unintentional leaks can be punished with up to two years behind bars. In addition, individuals who knowingly receive secrets from an administrative organ risk up to five years in prison if the disclosures are found to be intentional, and one year for disclosures made through negligence.81 Implementation guidelines for the law described four main fields of state secrets—defense, diplomacy, counterintelligence, and counterterrorism—which are further divided into 55 categories.82

Other laws prescribe potentially disproportionate penalties for online activity. A 2012 legal revision targeting copyright violators applies to any internet users who download content they know has been illegally copied, as opposed to just those engaged in piracy for commercial gain.83 While both uploading and downloading pirated material was already illegal under the copyright law, with uploaders subject to 10 years of imprisonment or fines of up to ¥10 million ($88,000), the version in effect since 2012 added two years in jail or fines of up to ¥2 million ($18,000) for downloading a single pirated file.84

In response to the attempted blocking of manga piracy sites in early 2018 (see B1), the Cultural Council of the Cultural Affairs Agency discussed amending the copyright law to expand the types of content that would be illegal to download or reproduce beyond pirated music and videos, to include material such as social media posts showing animated characters or personal blogs with icons containing copyrighted images.85 In March 2019, in light of free expression concerns and opposition from some LDP members, the government decided not to move forward with the proposed bill.86

A 2013 revision of the Public Offices Election Act lifted long-standing restrictions on the use of the internet for election campaigns. There are still limits on paid online advertising and campaign emails, which can only be sent directly by a party or candidate—not a supporter—in a measure designed to prevent fraud.87 While these provisions were contested, and revisions are still planned,88 politicians who violate the existing restrictions face a potential fine of ¥300,000 ($2,600) or one year in prison; imprisonment would strip perpetrators of their right to vote or run for office. Voters found to have improperly solicited support for a candidate via email could be fined ¥500,000 ($4,400) or jailed for two years.89

Article 175 of the penal code bans the sale or distribution of “obscene” material, and while the relevant provisions date back more than century, they are considered to apply online.90 The article does not define what constitutes obscenity, leading to concerns that it could be invoked against artistic expression or used to curtail the rights of LGBT+ people.91

A 2011 law criminalized the creation or distribution of computer viruses without a legitimate reason.92 Individuals can be sentenced to up to three years in prison or fines of up to ¥500,000 ($4,400). Many experts have indicated their concern about ambiguous components of the law that could be amenable to abuse. During the coverage period, a number of users were charged with virus-related offenses (see C3).

Other laws regulate online activity but are not known to have resulted in abuse or disproportionate penalties. Heightened awareness of revenge porn and online harassment culminated in the adoption of a law criminalizing revenge porn in 2014. The measure stipulates that offenders can face up to three years in prison or a fine of up to ¥500,000 ($4,400), and that third-party distribution can draw up to one year in prison and a fine of ¥300,000 ($2,600).93 Japan’s antistalking law, originally enacted in 2000, was revised in 2013 to address email harassment, and further revised in 2016 to penalize repeated blog posts or messages on social networking services.94

C3 0-6 pts
Are individuals penalized for online activities? 5 / 6

No citizens faced politically motivated arrest or prosecution for their online activity during the coverage period of this report.

However, a number of users were arrested and charged under a 2011 law criminalizing the creation and use of computer viruses without a legitimate reason (see C2). In June 2018, police announced that they arrested 16 website operators for allegedly using a service called Coinhive to mine cryptocurrencies via site visitors’ computers without their consent.95 Some of those arrested were fined ¥100,000 ($900).96 In March 2019, the Yokohama District Court acquitted one defendant, ruling that the cryptocurrency mining program did not constitute a virus.97 In July 2018, another user was convicted for illegally mining cryptocurrency and sentenced to a suspended prison term of three years.98 Separately in March 2019, a 13-year-old girl was arrested for spreading a link that triggered an infinite loop of pop-up windows.99

There are periodic reports of arrests under the copyright law, which carries possible prison terms for both uploading and downloading content without the permission of the copyright owner (see C2). The cases rarely appear to involve commercial piracy, and some internet users may be exposed to heavier penalties based on their use of peer-to-peer file-sharing software, which simultaneously downloads and uploads files even if users have accessed them for personal use and are not actively trying to disseminate them.100 In 2017, two people were sentenced to 18 months in prison, a three-year suspension, and a ¥500,000 ($4,400) fine for copyright-related offenses.101

C4 0-4 pts
Does the government place restrictions on anonymous communication or encryption? 3 / 4

Individuals can generally use the internet anonymously in Japan. However, some digital activities require separate registration. Major mobile carriers require customers to present identification documents in order to subscribe. Internet café users are required to produce formal identification documents such as a driver’s license, and to register their name and address. Police can request these details, along with usage logs, if they detect illegal online activity.

There are no explicit restrictions on encryption. Under the criminal procedure code, however, investigators can order a person to decrypt an encrypted electronic record.102

C5 0-6 pts
Does state surveillance of internet activities infringe on users’ right to privacy? 2 / 6

Japan’s Supreme Court protects privacy in part through its interpretation of Article 13 of the constitution, which provides for the right to life and liberty.103 The constitutional right to secrecy of communications is also protected under telecommunications laws.104 However, recent developments in Japan have raised serious concerns about increased surveillance, including reports of opaque surveillance operations and the approval of a conspiracy law that may allow police to seek wiretap warrants in a wider range of circumstances.

In November 2018, the amended Telecommunications Business Act and the Act on the National Institute of Information and Communications Technology (NICT) came into effect.105 The changes allow the NICT and the MIC to carry out the NOTICE program, authorizing them to attempt to access domestic internet-enabled devices for up to five years in an effort to strengthen cybersecurity (see C8).106 With seemingly no judicial oversight and potential access to millions of users’ personal devices, NOTICE has raised serious privacy concerns. In February 2019, civil society groups and ordinary users issued a joint statement asking the MIC to suspend the program.107

The conspiracy law passed in 2017 raised the possibility of more government surveillance. It criminalized “planning” to commit a series of newly designated “serious crimes” that could supposedly fund terrorism, including copyright violations, potentially making more suspects subject to wiretaps. The UN special rapporteur for privacy noted ahead of the law’s passage that “in order to establish the existence and the extent of such ‘a planning’ and ‘preparatory actions,’ it is logical to assume that those charged would have had to be subjected to a considerable level of surveillance beforehand.”108

Under a wiretap law enacted in 2000, law enforcement agents may seek a court order to conduct electronic surveillance in criminal investigations involving drugs, firearms, human trafficking, or organized murders, in an exception to articles of other laws that explicitly forbid wiretapping.109 In 2016, the law was expanded to include fraud, theft, and child sexual abuse images.110 The law obliges agents to notify targets of wiretaps after investigations are concluded and inform the Diet (parliament) about the number they implement annually. Critics say the law does not prevent the systematic storage of intercepted communications or protect innocent parties.111 In February 2019, the Justice Ministry announced that 10,359 mobile phone calls were tapped during 2018, leading to 82 arrests.112

https://www.asahi.com/articles/ASM2G4RCVM2GUTIL01M.html

The wiretap law was controversial when it passed, in part due to the authorities’ periodic abuse of surveillance powers.113 Security agents and the military were accused of conducting illegal surveillance in cases involving national security in 2003 and 2004.114 In June 2016, the Supreme Court dismissed a legal challenge to the police practice of monitoring places of worship and other venues used by members of the Muslim community. The original case was brought after a 2010 leak of police documents revealed that Muslims were subject to widespread monitoring for possible terrorist activity. It was not clear how much of the monitoring involved digital as opposed to physical surveillance.115

Some Japanese security agencies may have equipment enabling the blanket collection and monitoring of communications data, though it is unclear how such technology has been used, what laws govern its employment, and what, if any, safeguards there are. The 2014 state secrets law, which covers national security issues, may make surveillance abuses harder to document (see C1 and C2).

In May 2018, the public broadcaster NHK and the Intercept reported on the activities of the Directorate for Signals Intelligence (DFS), a spy agency that monitors and analyzes electronic communications.116 The reporting claimed that the government has deployed a clandestine online surveillance program, dubbed MALLARD, to observe communications passing between satellites.117 The information collected is reportedly stored for around two months, during which it is analyzed to determine if it is of interest to DFS. It is unclear whether and to what extent domestic users have been caught up in the program. An earlier Intercept report from 2017 had analyzed leaked documents that implicated Japanese police and intelligence agencies in regional surveillance operations by the US National Security Agency (NSA). The report notes that the Japanese Directorate for SIGINT was provided XKEYSCORE, a surveillance tool that can search through a range of content and metadata online.118

C6 0-6 pts
Are service providers and other technology companies required to aid the government in monitoring the communications of their users? 3 / 6

Service providers and other technology companies can be required to aid the government in monitoring the communications of their users. Some companies cooperate with investigative authorities by turning over their users' data without receiving a court order to do so.

Some companies report on data requests they receive from government agencies. LINE, a messaging application with servers based in Japan, reported that 86 percent of the global law enforcement requests for user data it had received between January and June 2018 came from Japanese entities. The company said it complies with requests that are based on a warrant, an investigation-related inquiry, or an emergency order under the Japanese penal code and criminal procedure code.119 Google reported 243 requests for user data between July and December 2018, and produced some data in 83 percent of cases. Facebook reported 20 government requests involving 23 accounts between July and December 2018. The platform provided data in 45 percent of cases.120

A 2003 law protects personal information collected electronically by private and public-sector organizations when it consists of more than 5,000 records.121 Law enforcement requests for this data should be supported by a warrant.122 Amendments passed by the Diet in 2015 defined “personal information” in more specific terms as “biometric information” and “numeric data that is capable of identifying a specific individual.”123 Anonymization provisions allow for personal data to be transferred to a third party without the consent of the subject if specific requirements are met.124 Criminal sanctions for misusing personal data and restrictions on the transfer of personal data to overseas jurisdictions that lack equivalent safeguards were also strengthened.125 Finally, the amendments established the Personal Information Protection Commission as an “independent authority under the Cabinet Office,” replacing the Consumer Affairs Agency.126

Under voluntary guidelines drafted by four ISPs in 2005, service providers automatically inform police of internet users identified on websites that endorse suicide, and comply with law enforcement requests for information related to acts of self-harm.127 A law enacted in 2003 and revised in 2008 prohibits electronic communications encouraging sexual activity with minors.128 Under the law, all online dating services must register with the police, verify their customers’ ages with a driver’s license or credit card, and delete or block content that appears to involve someone under 18; most services voluntarily monitor messages in real time to ensure compliance.

Changes to the legal frameworks surrounding privacy and surveillance are often considered in the context of the ongoing digitization of citizens’ personal records. The 2013 My Number law introduced a unique 12-digit number for all long-term residents that is used to access unified social welfare services, as well as for taxation purposes; citizens will be required to link their bank records to the numbers by 2021.129 Photo identification cards with My Number information contain electronic data chips, though many people had not received one, or bothered to apply for one, as of 2017.130 Municipal governments and agencies responsible for administering these services are tasked with storing My Number data, leading to privacy concerns, especially in light of high-profile cyberattacks that have exposed personal information (see C8).131 The Personal Information Protection Commission reported that personal information linked with My Number had been leaked or mistakenly disposed of in 157 instances from April to September 2018;132 some cases of fraud were also reported.133

C7 0-5 pts
Are individuals subject to extralegal intimidation or physical violence by state authorities or any other actor in retribution for their online activities? 2 / 5

While Japan is typically free from physical violence against bloggers and internet users, the latest coverage period featured the murder of a popular blogger and cybercrime expert.

In June 2018, Kenichiro Okamoto, known as Hagex online, was murdered in Fukuoka after presenting a seminar on best practices to deal with online disagreements and abuse, among other topics.134 The man who later confessed to the stabbing had allegedly harassed Okamoto online.

C8 0-3 pts
Are websites, governmental and private entities, service providers, or individual users subject to widespread hacking and other forms of cyberattack? 2 / 3

Cybersecurity efforts have ramped up ahead of the 2020 Olympics, particularly around internet of things (IoT) devices.135 In February 2019, the NICT, under the MIC, launched the NOTICE program,136 which will try to crack the passwords of about 200 million internet-connected devices in homes and offices, starting with webcams, routers, and sensors, in order to better secure vulnerable devices with stronger passwords. If a device is successfully hacked, the owner will be advised to strengthen security measures, for instance by making their passwords more complex. Despite promises that the program will not target phones and personal computers, critics have expressed privacy concerns (see C5).

Cyberattacks occasionally target civil society and private companies. In April 2019, the Japanese information-technology trading company Macnica Networks Corp. stated that groups believed to be connected to China were suspected of targeting private companies; it cited alleged efforts by the Chinese cyber group APT10 to hack Japanese defense companies in 2018.137 In one significant cyberattack against civil society organizations, at least 33 antinuclear citizens’ groups were targeted in 2013.138

Public attention to cybersecurity threats has increased since mid-2015, when 1.25 million citizens were affected by the release of personal information obtained by hackers who illegally accessed Japan’s pension system using an email virus.139

Footnotes