| Mobile Web

Japan tightens personal data security guidance, urges deletion of unused data

Japan’s Personal Information Protection Commission set out strengthened security measures for companies after a series of large-scale personal data leaks. It urged phishing-resistant multi-factor authentication for access to external networks, admin accounts and sensitive data, and recommended tools such as FIDO2 passkeys. The commission also called for intrusion detection using IDS/IPS and EDR, safe deletion methods for cloud-stored data, and prompt deletion of information no longer needed.