Japan's data protection authority, the Personal Information Protection Commission, released its triennial review of the Act on the Protection of Personal Information. The report details potential provisions to the APPI, including a surcharge system and possible criminal penalties in an effort to increase compliance.