Japan's Economic Security Promotion Act Amendment (2026, Cabinet Bill No. 30): What Export Control Officers Should Watch as Services and Medical Infrastructure Come Into Scope

Hello, this is Hamamoto from TIMEWELL.

On March 19, 2026, the Japanese government approved a bill that revises both the Economic Security Promotion Act and the Japan Bank for International Cooperation Act at once, and sent it to the Diet that same day[^1]. Filed as Cabinet Bill No. 30 in the 221st Diet session, it is the first substantial amendment to the Promotion Act since the law was enacted in 2022. The House of Representatives Cabinet Committee held questioning on May 13, and as of early June the bill remains in deliberation[^2]. I have seen articles describe it as enacted, but strictly speaking it is still being debated. Confuse this point and an internal briefing can quickly trip you up, so let me settle it at the outset.

I spend most of my working hours close to the export control floor, so when I first saw this amendment I hesitated for a moment and thought, "Is this even an export control matter?" The core of the text is about protecting domestic supply chains and critical infrastructure, not about export licenses. Yet the more I read, the more I felt that the people running classification and screening are exactly the ones who cannot afford to look away. Expanding to services and adding medical infrastructure is continuous with the work of rethinking what your own company hands over, to whom, and where. Today I want to write through that reasoning carefully, following the primary sources as I go.

First, get the foundation of the Economic Security Promotion Act right

Before moving to the amendment, let me share the shape of the underlying law precisely. The Economic Security Promotion Act, formally titled the Act on the Promotion of Ensuring Security by Integrated Implementation of Economic Measures, was enacted in 2022 as Act No. 43 of 2022[^3]. The name is a mouthful, but in essence it is a law for striking economic policy and national security together rather than treating them separately. The law bundles four distinct systems into a single statute.

The first is ensuring the stable supply of specified critical materials. The state designates materials such as semiconductors, pharmaceuticals, and critical minerals whose disruption would cripple daily life or the economy, and it supports domestic production and stockpiling. The second is ensuring the stable provision of critical infrastructure services. For services that hold up the roots of society, such as electricity, gas, and telecommunications, operators must file a plan with the state and undergo review before introducing or outsourcing the maintenance of important equipment. The third is support for developing specified critical technologies, where the state funds research into advanced and sensitive technology and advances it through public-private cooperation. The fourth is non-disclosure of patent applications, which keeps the content of inventions that could be diverted to weapons out of public view.

Of these four pillars, the ones export control officers usually have in mind are around specified critical materials and specified critical technologies. The sourcing of critical minerals and the sensitive technology handled in research overlap directly with the concerns of security export control. This amendment is, in effect, an addition of new rooms on top of that foundation. Stare only at the extension while ignoring the foundation, and you lose sight of why those rooms are being built there. So even if it feels like a detour, I want you to move on with the outline of the four systems firmly in your head.

For what kind of practical burden each of these four systems places on companies, I go deeper in a separate piece, "The Basics of Economic Security." This article concentrates on the amendment, so if you want to verify the entry point of the systems first, reading that piece beforehand will deepen what follows here.

Reading the three pillars of the amendment through the proposal and Diet materials

So what is being added? The starting point is the proposal titled "Recommendations for Further Promotion of Economic Security," compiled on January 30, 2026, by the Advisory Panel on the Economic Security Legal Framework housed in the Cabinet Secretariat[^4]. The government translated the direction set out in this proposal into the bill, arriving at the March 19 cabinet decision. Tracing the proposal's table of contents makes the intent of the amendment fairly clear. There are three pillars, as I read it.

The first is expanding support to services. The framework for specified critical materials has so far centered on goods. The idea was to support the semiconductor itself or the pharmaceutical itself. The proposal, however, argues that support should extend to the services that are indispensable to supplying critical materials[^5]. Reporting cites the laying of submarine cables and rocket launch sites as examples of such services[^1]. You can make the goods, but supply falls apart without the sea routes to carry them or the sites to launch them. This is an effort to capture that obvious truth as a system. Widening the eye that watched goods to the services, equipment, and the providers tied to those goods is the heart of the first pillar.

The second is adding the medical field to critical infrastructure. In the chapter on critical infrastructure services, the proposal squarely argues the need to add the medical field[^6]. Concretely, medical information platforms, the body that reviews and pays medical claims, and larger individual hospitals are under consideration. Behind this is the reality that the digitalization of medical institutions has advanced, and that electronic records and online consultations have become easier targets for cyberattacks. Given the impact of a halt in services that are tied directly to human life, counting this within critical infrastructure is reasonable.

The third is financial support for important overseas projects through JBIC, the Japan Bank for International Cooperation. This is why the bill revises not only the Promotion Act but the JBIC Act as well[^7]. When public and private entities jointly invest in overseas projects important from an economic security standpoint, JBIC will take on loss risk first through subordinated investment, priming the pump for ventures that private capital hesitates to touch. Semiconductors, shipbuilding, and drone manufacturing are mentioned as targets[^1]. The proposal also touches on creating a comprehensive economic security think tank and a new public-private council where the government and companies exchange sensitive information[^8]. From the export control floor, the council is what I cannot overlook. If a venue forms where information related to preventing leakage flows between government and companies, officers gain one more source of intelligence.

What 257 operators and a move to 16 sectors means for companies

Of the three pillars, the one I expect to bite into corporate practice soonest is the expansion of critical infrastructure. Let me pin down the current scale with numbers. According to the Cabinet Office briefing materials, the specified critical infrastructure system is already running, and as of April 1, 2026, 257 operators are designated as specified critical infrastructure providers[^9]. The law itself took effect in November 2023, and the system began operating on May 17, 2024. A designated operator must file an introduction plan with the state and undergo review before introducing important equipment or outsourcing its maintenance. The review period is 30 days. If the state finds a high risk that equipment could be used as a means of obstruction from abroad, it can issue recommendations or orders.

The scope currently covers 15 sectors. These are electricity, gas, oil, water supply, railways, freight motor transport, ocean-going cargo, port transport, aviation, airports, telecommunications, broadcasting, postal services, finance, and credit cards[^9]. Among these, port transport is a newcomer, added in the 2024 revision, taking effect on April 1, 2025, with the filing obligation beginning on November 2 of that year. In other words, the system is not fixed; it has a character that lets sectors be added as social conditions change. Now medical care is set to join as the sixteenth. The seemingly modest shift from 15 to 16 actually carries the potential to draw hundreds of medical-related operators newly into the system's reach.

Concluding that you are safe because your company is not a designated operator is premature. Look closely at the system's diagram and the regulatory net reaches not only designated operators but the vendors supplying important equipment, the subcontractors maintaining it, and even their sub-subcontractors[^9]. A company supplying component parts for equipment can be drawn into the review. This means that if you supply medical devices or information systems to a critical infrastructure operator, the occasions on which your own profile and supply chain are questioned through your customer's review will increase. Even if you sit just outside the line of designation, if you trade right next to it, the effects will surely ripple over. This ripple range is, I believe, the point most easily overlooked in this amendment.

How export control officers should frame the practical impact

Having read this far, some of you may feel, "After all, this is not about export licenses." It is true that the main battleground of the text is protecting domestic supply chains and critical infrastructure, and the amendment does not rewrite the export licensing system itself. Even so, the reason I urge export control officers to watch this amendment is that there are three points of contact.

The first is the shift in perspective that brings services into classification review. When services become a target of support, it means the government has begun to move on the premise that what matters is not only goods. On the export control floor, there have always been moments of reviewing the applicability of technology transfers and service transactions, not just the classification of cargo. This amendment becomes a tailwind that lifts attention to services across the whole company. What does handing technology or design information to an overseas counterparty mean for security, and what about providing maintenance or consulting services? Officers who watched only the goods list will widen their field of view a notch here.

The second is the lengthening reach of customer screening. The critical infrastructure review traces the supply chain back to subcontractors and sub-subcontractors. This closely resembles the idea of confirming a counterparty's profile in export control, what we call end-user screening. If you trade with a critical infrastructure operator in the medical or services field, you will more frequently be asked, "Tell us your capital structure and your suppliers." Conversely, if you use external vendors as a buyer, your responsibility to verify their profiles yourself grows heavier. The very concept of screening sits on the same ground as the know-how built up over years in export control.

The third is continuity with catch-all controls. The revision of the complementary export controls, the catch-all controls, took effect on October 9, 2025, clarifying the end-use and end-user requirements[^10]. Even for general-purpose items not on a list, a license application becomes necessary if you judge a high risk that they will be used for conventional weapons development, and even shipments to Group A countries are caught by the inform requirement if there is concern over circumvented procurement. I cover the details of this revision in a separate piece, "The Full Picture of List Controls and Catch-all Controls," so refer to it if you want to verify the substance. My point is that both the Economic Security Promotion Act amendment and the catch-all revision share the same root. The former protects the core of one's own country; the latter stops leakage outward. With defense and leak-stopping as two wheels, officers need to line both up on the same table.

Keeping up with this widening of practice by manpower alone is, frankly, tough. Reviewing transactions including services, screening back through subcontractors and sub-subcontractors, and matching against the catch-all end-user requirement, transaction after transaction by hand, will saturate a department in no time. The export control AI agent we offer, "TRAFEED," lets you simply upload a list of counterparties and cross-checks it against sanctions lists, end-user lists, and the regulatory lists of many countries worldwide, presenting the presence or absence of risk and its grounds in seconds. It also supports classification assistance aligned with the standards of the Ministry of Economy, Trade and Industry, and the reconciliation of multilingual counterparty names. As the system widens into services and medical care from here, the realistic move is to leave the mechanical matching to a machine so people can concentrate on the points that require human judgment.

What companies should do now

The bill is in deliberation, and the final text and the details of cabinet and ministerial ordinances will be settled from here. That is no reason to wait until enactment to move. The time you can spend preparing is precisely this deliberation period. What I tell clients comes down to three checks.

First, calmly judge whether your company falls within the reach of the critical infrastructure expansion. Do you operate in the medical or services field, or do you supply important equipment or information systems to operators in such fields? If you might become a designated operator, a new administrative task of filing introduction plans will arise. Even if you are not a direct target of designation, if you sit as a subcontractor or supplier that could be drawn into the review, you should prepare materials now that can explain your capital structure and supply chain. Looking it up in a panic after being asked versus having it on hand makes for a very different margin of response.

Second, reread your internal export control rules through the lens of services. Many companies' management rules are built around the classification of cargo, and the judgment of service transactions and technology transfers tends to be thin. The direction the amendment is heading is a flow that treats not only goods but services and data as objects of security. Aligning with that flow, rebuild your judgment process to incorporate your technology transfers, maintenance services, and data handling. It is unglamorous, but it works. At the same time, check whether the new catch-all requirements that took effect in October 2025 are reflected in your front-line judgment standards. I also lay out recent moves in Japan's export control system itself in "Trends in the Export Trade Control Order Amendment," which you might use as training material.

Third, shift the operation of screening and classification from manpower dependence toward system dependence. Both the expansion to services and the addition of medical care boil down to "the objects you must watch are increasing." The objects increase, yet the number of officers does not. Continue manual work under that structure and oversights are only a matter of time. Automate the repetitive work of reconciling counterparty names, matching against sanctions lists, and confirming the applicability of controlled items, so people can concentrate on judgment and accountability. Rather than scrambling after enactment, lift your operation a notch now, during deliberation. That is the preparation I recommend most strongly.

Conclusion

Let me organize the key points. The Economic Security Promotion Act amendment is in deliberation as of June 2026 and is not yet enacted. Pinning this down accurately is the starting point of any internal briefing.

• The bill was approved and submitted on March 19, 2026, as Cabinet Bill No. 30 in the 221st Diet session, and revises the Promotion Act and the JBIC Act together
• The three pillars are expanding support to services, adding the medical field to critical infrastructure, and JBIC financial support for important overseas projects
• Critical infrastructure currently has 15 sectors and 257 designated operators; adding medical care would move it to 16 sectors, and the reach extends to subcontractors and sub-subcontractors in the supply chain
• For export control officers there are three points of contact: the expansion of classification to services, the lengthening reach of customer screening, and continuity with catch-all controls
• Rather than waiting for enactment, now during deliberation is the time to confirm your reach, reread your rules through a services lens, and systematize your screening operation

The system keeps adding sectors in step with social conditions. Port transport joined recently, and medical care waits next. It is natural to assume the scope will keep widening from here. Chasing an ever-widening scope by hand is not sustainable. That is precisely why, in a phase where the range you must watch grows, you should leave the matching that a machine can handle to the machine and let people concentrate on judgment. Setting up that stance is, I believe, the only realistic path to receiving the wave of this amendment without panic.

References

[^1]: Government to Support Overseas Projects in Semiconductors and Shipbuilding; Cabinet Approves Economic Security Act Amendment | Nikkei (March 19, 2026) [^2]: Cabinet Bill, 221st Diet Session, No. 30, Bill to Partially Amend the Act on the Promotion of Ensuring Security by Integrated Implementation of Economic Measures and the JBIC Act (Bill Progress Information) | House of Representatives (2026) [^3]: Act on the Promotion of Ensuring Security by Integrated Implementation of Economic Measures (Act No. 43 of 2022) | e-Gov Law Search [^4]: Recommendations for Further Promotion of Economic Security | Advisory Panel on the Economic Security Legal Framework (January 30, 2026) [^5]: Recommendations for Further Promotion of Economic Security (III. Strengthening Supply Chain Resilience: Measures on Services) | Advisory Panel on the Economic Security Legal Framework (January 30, 2026) [^6]: Recommendations for Further Promotion of Economic Security (IV. Stable Provision of Critical Infrastructure Services: Addition of the Medical Field) | Advisory Panel on the Economic Security Legal Framework (January 30, 2026) [^7]: Government Moves to Amend JBIC Act for Subordinated Investment in Economic Security Overseas Projects | Nikkin Online (2026) [^8]: Recommendations for Further Promotion of Economic Security (VII. Comprehensive Economic Security Think Tank, VIII. Public-Private Council) | Advisory Panel on the Economic Security Legal Framework (January 30, 2026) [^9]: System for Ensuring the Stable Provision of Specified Critical Infrastructure Services under the Economic Security Promotion Act (Briefing Materials) | Cabinet Office (April 1, 2026) [^10]: Revision of Complementary Export Controls (Effective October 9, 2025) | Ministry of Economy, Trade and Industry (2025) [^11]: Research and Information ISSUE BRIEF No. 1356: Basic Concepts of Economic Security and Trends in the Promotion Act | National Diet Library (March 31, 2026) [^12]: Economic Security Promotion Act | Cabinet Office