Introduction On 12 June 2020 the Diet promulgated the Amendment Act of the Act on the Protection of Personal Information, which will come into force by June 2022.(1) Many of the act's provisions have been delegated to subordinate regulations, including: the Cabinet Order to Enforce the Act on the Protection of Personal Information; and the Personal Information Protection Commission's (PPC's) Enforcement Rule for the Act on the Protection of Personal Information. In December 2020 further proposed amendments to these regulations were published.(2) This article outlines the effect that these proposed amendments will have on businesses' disclosure requirements when transferring personal data to overseas third parties.(3)