Skip to content
Legislations.
JapanJapanLawLawAct No. 42 of 2025

Active Cyber Defense Act (Act on Preventing Damage from Unauthorized Acts Against Critical Computers)

Creates Japan's active cyber defense framework, requiring designated critical infrastructure operators to report incidents and letting the government acquire and analyze cross-border communications data under review by a new independent oversight commission.

Where it stands

In forceIntroducedCommitteeFloorLawIn force

Further provisions enter into forceApr 15 months ago

Body
National Diet of Japan
Session
217th Diet (ordinary session)
Introduced
Feb 7, 2025
In effect since
May 23, 20251 year ago
CyberTelecom
Official page

Timeline

  1. Nov 22, 2027 in 1 year

    Remaining provisions scheduled to apply on a date set by cabinet order, no later than this date

  2. Oct 1 in 4 days

    Incident reporting provisions for designated critical infrastructure operators scheduled to apply

  3. Apr 1 5 months ago

    Further provisions enter into force

  4. Jul 1, 2025 1 year ago

    Further provisions enter into force

  5. May 23, 2025 1 year ago

    Promulgated as Act No. 42 of 2025, with initial provisions taking effect

  6. Feb 7, 2025 1 year ago

    Bill submitted to the Diet by the Cabinet