My Number Act Copilot
Japan's Individual Number system and its handling rules
What the My Number Act Copilot Can Do
Understand what the Individual Number is and what it is used for
Distinguish My Number handling rules from general APPI obligations
Work the purpose limitations on collection, use, and provision
Structure corporate responsibility and required safety measures
Handle documents and storage rules for Individual Numbers
Prepare for misuse prevention and internal controls
About My Number Act Copilot
The My Number Act (Act on the Use of Numbers to Identify a Specific Individual in Administrative Procedures, Act No. 27 of 31 May 2013) establishes Japan's Individual Number system for tax and social security administration. It imposes strict handling rules that go beyond general data protection law: collection, use, and provision of Individual Numbers are limited to defined purposes, with corporate responsibility and safety measures required from handlers. The My Number Copilot helps you interpret the scope of the regime and the obligations it creates.
Cross-framework mappings
Working across My Number Act and another standard? ISMS Mappings is a free public directory of control maps (ISO 27001, SOC 2, NIST, GDPR, and more). A Better ISMS tool, separate from the chat assistant.
Browse free mappingsFrequently Asked Questions
What is the My Number Act?
It is Japan's Act No. 27 of 31 May 2013, which created the Individual Number system, known as My Number. Residents with a resident record in Japan receive an Individual Number used for tax and social security procedures, and the act sets strict rules for how organisations may handle those numbers.
How does it relate to the APPI?
The APPI is Japan's general data protection law and continues to apply, but the My Number Act adds a stricter, purpose-specific regime for Individual Numbers. Handling My Number data means complying with both layers, with the stricter handling rules prevailing for the numbers themselves.
What do businesses need to watch most?
Purpose limitation is the core duty: collecting, using, or providing Individual Numbers outside the legally defined purposes is prohibited and penalised. Organisations need defined internal rules, safety measures, and control over storage and disposal of My Number documents.
Ready to do compliance work faster?
Built for speed, accuracy, and audit-ready output.