TRAFEED

Japan's Anti-Espionage Law and Economic Security Information Protection Act for Enterprises [2026-May]: National Intelligence Bureau, Security Clearance, and the Forthcoming FARA-Style Registry

2026-02-18Ryuta Hamamoto

An enterprise-focused guide to Japan's evolving anti-espionage framework as of May 2026: the Important Economic Security Information Protection and Utilization Act (in force since May 2025) and its security clearance system, the National Intelligence Council Establishment Bill approved by Cabinet on March 13, 2026, and the ongoing debate over a Japanese FARA-style foreign agent registry. We outline what export control, counterparty screening, and personnel management need to look like, including how TRAFEED can help.

Japan's Anti-Espionage Law and Economic Security Information Protection Act for Enterprises [2026-May]: National Intelligence Bureau, Security Clearance, and the Forthcoming FARA-Style Registry
シェア

Japan's Anti-Espionage Law and Economic Security Information Protection Act for Enterprises [May 2026 Update]

Hello, this is Ryuta Hamamoto from TIMEWELL.

Over the past year, the legal framework around what the Japanese press calls "the anti-espionage law" has accelerated sharply. As of May 2026 there are three pillars in motion that you should understand together:

  1. The Act on the Protection and Utilization of Important Economic Security Information (enacted May 2024, in force since May 16, 2025). This is Japan's domestic security clearance system, now fully operational with published guidelines [1] [2].
  2. The National Intelligence Council Establishment Bill (Cabinet decision on March 13, 2026). It creates a National Intelligence Council chaired by the Prime Minister and a National Intelligence Bureau formed by reorganizing the Cabinet Intelligence and Research Office. The government is targeting a July 2026 launch [3].
  3. A foreign agent registration system (Japanese FARA). The October 2025 LDP-Ishin coalition agreement commits to enacting it. After a planned summer 2026 expert panel, drafting is now in active discussion [4].

These are three separate laws, but they share a single intent: protecting advanced technology and sensitive information from leakage through people and organizations. This article walks through the current state of each pillar from a business perspective. As someone running a tech business, I have tried to lay out the arguments on both sides and then note where I personally come down.


Where Japan's Anti-Espionage Law Stands as of May 2026

The phrase "anti-espionage law" means very different things depending on which outlet you read. Sorting out the terms first is essential.

A single anti-espionage statute does not yet exist

As of May 2026, Japan has no single statute that comprehensively penalizes espionage. The LDP submitted such a bill in 1985, but its proposal of the death penalty as the maximum sentence and the open-ended scope of "state secrets" subject to government discretion led to its withdrawal [5]. The Act on the Protection of Specially Designated Secrets, enacted in 2013, strengthened penalties for leaking specifically designated secrets in defense, diplomacy, counter-terrorism, and counter-espionage, but it does not criminalize espionage activity in general.

What is moving instead is a cluster of frameworks

Instead of a single statute, what is advancing is the three-pillar structure above. The clearance regime is being built through the Economic Security Information Protection Act, an intelligence command structure through the National Intelligence Council bill, and visibility into foreign influence through a FARA-style registry. Each is its own law, but taken together they are reasonably described as Japan's "anti-espionage law framework."

The coalition agreement also commits to establishing an external intelligence agency by the end of fiscal 2027 [3], which would be the largest reorganization of Japan's intelligence community since the war.

The grey zones the current laws cannot reach

It is worth noting where the current laws fall short. Theft, the Unfair Competition Prevention Act, the Foreign Exchange and Foreign Trade Act (FEFTA), the Specially Designated Secrets Act - each addresses a slice. None of them directly captures, for example, regular contact with a foreign government official, payment for that contact, and verbal transfer of non-public domestic policy information. CISTEC's December 2025 review explicitly notes that the economic-security domain still has wide gaps that operational guidelines and education are only partially compensating for [6].

For companies, this means the patchwork era is not over yet. Several laws will be moving in parallel for the next two to three years.


The Economic Security Information Protection Act and Security Clearance

The first thing to recognize is that this law is no longer "under discussion." It is already operational.

Structure of the law

The Act on the Protection and Utilization of Important Economic Security Information was enacted on May 10, 2024 and came into force on May 16, 2025 [1]. Information requiring protection on economic-security grounds is designated as "Important Economic Security Information." Private operators handling that information through government contracts are certified as "qualified business operators," and employees with access undergo an "aptitude assessment" - a background check - before they can handle the information [2] [7].

What the aptitude assessment looks at

The scope of the assessment is similar to the Specially Designated Secrets clearance:

Assessment item Main contents
Terrorism connections Violent destructive activity, ties to terrorist organizations
Criminal and disciplinary record Past criminal cases, disciplinary actions
Information handling Past leaks, history of handling classified information
Substance use Illegal drug use, problematic alcohol use
Financial situation Debts, credit history, unexplained asset accumulation
Family and household Nationality of spouse and household members, foreign ties
Travel history Countries visited, purpose of stay

The assessment requires the individual's consent. If consent is not given, the person cannot be assigned to the relevant work. Newton Consulting's overview emphasizes that the breadth of the inquiry makes consent procedures, complaint handling, and operational rule design the most demanding implementation challenges for companies [8].

Implications for business

Companies in defense, space, cyber, quantum, semiconductors, AI, and biotechnology - particularly those involved in government procurement or international joint research - will need to consider applying for qualified-operator status. As BUSINESS LAWYERS notes, the scope reaches well beyond traditional defense procurement to include programs like K Program (the Economic Security Critical Technology Development Program) [7].

For my part, I do not see a strong reason to oppose the system itself. Once you participate in allied information sharing or international tenders, having a clearance regime that allies recognize is essentially mandatory. That said, when family ties and travel history are part of the inquiry, internal rules need to be carefully built to prevent the data from leaking into HR evaluations or producing discriminatory outcomes. That work cannot wait until the first assessment lands.


Replace siloed classification work with AI.

METI's FY2024 data shows 52% of foreign exchange law violations stem from classification errors. TRAFEED cuts determination time by ~70% and stores structured rationale for every decision.

National Intelligence Council Establishment Bill (Cabinet decision March 13, 2026; July launch target)

This is the biggest news of 2026 so far.

Outline of the bill

On March 13, 2026, the Cabinet approved the National Intelligence Council Establishment Bill and submitted it to the Diet [3]. Two main components:

  1. A new National Intelligence Council (NIC) chaired by the Prime Minister and including the Chief Cabinet Secretary, the Minister for Foreign Affairs, and the Minister of Defense. It will draft Japan's first medium- to long-term "National Intelligence Strategy."
  2. A new National Intelligence Bureau formed by reorganizing the Cabinet Intelligence and Research Office. It will serve as the secretariat consolidating intelligence functions currently dispersed across ministries, with new "comprehensive coordination authority."

The government is pushing for early enactment with a target launch of July 2026 [3]. The coalition agreement commits to following this with the establishment of an external intelligence agency by the end of fiscal 2027.

Arguments for and against

Reading press coverage and bar association opinions, the lines of debate are fairly clear.

In favor

  • Without a coordinating command structure, intelligence functions remain siloed across ministries and quick decisions are not possible.
  • For deeper information sharing with allies, Japan needs a recognizable counterpart.
  • The absence of a long-term written intelligence strategy is itself an anomaly.

Cautious or opposed

  • The bill grants strong "comprehensive coordination authority" but the framework for Diet or independent oversight is thin.
  • The Hyogo Bar Association has issued a statement opposing enactment without first establishing oversight bodies and human rights safeguards [9].
  • The Japan Federation of Bar Associations' February 20, 2026 opinion calls for careful deliberation on both intelligence agency strengthening and the FARA-style registry, citing both human rights concerns and the question of necessity [4].
  • A joint NGO letter to Prime Minister Sanae Takaichi (April 26, 2026), led by Human Rights Watch, urges explicit protections for journalists and civil society [10].

My view: a coordinating command structure is needed. But an organization with strong authority like a National Intelligence Bureau will, over the long run, almost certainly drift if independent oversight and disclosure mechanisms are not built in from day one. I would like the Diet debate to spend as much energy on "how to oversee it" as on "what to build."


The FARA-Style Foreign Agent Registry Debate

The second major pillar still under design is a foreign agent registration system.

Overview

Modeled on the U.S. Foreign Agents Registration Act, the proposed system would require persons acting in Japan on behalf of foreign governments, foreign political parties, or foreign companies for purposes of policy influence or public-opinion formation to register their activities and funding sources [4]. The intent is disclosure rather than prohibition: making transparent who is acting for which country and on what terms, in order to deter opaque foreign influence operations.

The October 2025 LDP-Ishin coalition agreement explicitly commits to enacting this regime, and after a planned summer 2026 expert panel, the legislative draft is in active discussion [3] [4].

Likely registration targets

The full scope of the bill is not finalized, but based on how the U.S. FARA and Australia's Foreign Influence Transparency Scheme operate, the following are candidates for inclusion:

  • PR firms conducting public communication in Japan under contracts with foreign governments
  • Lobbyists and consultants retained by foreign political parties or foreign companies
  • Japanese bureaus of foreign government-affiliated media
  • Foreign-affiliated think tanks engaged in policy advocacy in Japan

A point worth emphasizing: Japanese companies are not entirely outside the perimeter. If a Japanese subsidiary lobbies regulators on behalf of a foreign parent, or runs a public-opinion campaign in collaboration with foreign media, the question of whether the activity falls under the registry could arise.

Arguments for and against

In favor

  • Existing laws (the Self-Defense Forces Act, the National Public Service Act, the Specially Designated Secrets Act) do not provide a preventive view into foreign influence activity.
  • The U.S., U.K., and Australia operate similar regimes; the absence of one in Japan creates a gap.
  • Because it is a disclosure regime rather than a prohibition, it does not directly restrict speech.

Cautious or opposed

  • The Japan Federation of Bar Associations (February 20, 2026) argues that existing laws cover much of the concern, and that the impact on freedom of expression and association warrants reexamining whether the regime is necessary at all [4].
  • The label "foreign agent" itself carries social stigma and could chill the work of journalists, researchers, and civil society organizations.
  • Even in the U.S., aggressive enforcement of FARA in recent years has raised concerns about over-application [11].

My take: designing the regime around disclosure rather than prohibition is reasonable. But leaving the scope of "who counts as a foreign agent" to government discretion would be a serious design error. The categories should be written into the statute itself in concrete terms. Expanding scope later through operational guidelines tends to invite abuse, as the recent U.S. FARA debate shows.


What Companies Should Prepare, and How TRAFEED Can Help

This is the practical section. Rather than scrambling once a law passes, here is what should be in place during 2026.

1. Preparing for qualified-operator status and aptitude assessments

Companies likely to handle Important Economic Security Information (defense, space, cyber, quantum, semiconductors, AI, bio) should follow the PwC analysis and start aligning their internal frameworks with the operational guidelines now [12]:

  • Information management rules and pledge templates
  • Consent processes for aptitude assessments and alternative-assignment design for those who decline
  • Internal complaint and appeal channels
  • Information compartmentalization and physical security to required standards

2. Counterparty and joint-research screening

As the National Intelligence Bureau launches and the FARA-style registry advances, screening counterparties for foreign influence will become standard operating procedure. Specifically:

  • METI's Foreign User List (entities of concern related to military demand)
  • The U.S. OFAC SDN List
  • The U.S. EAR Entity List, Unverified List, and Military End User List
  • EU, U.K., and U.N. sanctions lists
  • The latest export-control sanctions lists in major jurisdictions

These are updated frequently, often involve multilingual name variations, and are difficult to maintain by hand at acceptable accuracy.

3. Reviewing personnel and contracts

  • Standardized explanation and consent processes when bringing in foreign researchers and engineers
  • Pre-screening clauses in contracts with foreign consultants, lobbyists, and PR firms covering whether they qualify as foreign agents
  • Internal approval workflows when responding to overseas group requests to engage Japanese government bodies

How TRAFEED helps

TRAFEED, formerly ZEROCK ExCHECK, is the export control AI agent we built at TIMEWELL to automate this counterparty and personnel screening. Enter the name, address, and related entities of a counterparty, and TRAFEED automatically cross-references multiple sanctions and regulatory lists, returning the basis for any hit and the relevant export classification points within seconds. It is built around Japan's METI/FEFTA standards and handles multilingual name variations.

The legal framework around espionage prevention will keep advancing, step by step. From what I see on the ground, digitizing your counterparty screening and personnel management now - while only the Economic Security Information Protection Act is in operational mode - costs less than retrofitting after the National Intelligence Bureau and FARA-style registry are both live.

If you are evaluating automation for export control or counterparty screening, please start with the TRAFEED page. A 30-minute online consultation (book here) walks through your product portfolio and overseas transaction profile and identifies the parts of your current process most readily automated.


Closing

The framework Japan is now calling its "anti-espionage law" is not a single statute. It is a cluster: the Economic Security Information Protection Act, the National Intelligence Council bill, the FARA-style foreign agent registry, and beyond them the planned external intelligence agency. The debate is multidimensional and there are reasonable arguments on both sides. Balancing security against rights, free expression, and an open international research environment is not a question with one correct answer.

From the perspective of corporate practice, however, the laws will come into force whether the debate is settled or not. The Economic Security Information Protection Act is already in operational mode, and the National Intelligence Bureau is targeting a July 2026 launch. Companies that act earlier carry less operational burden later.

I hope this article gives you a clear starting point for thinking about your own preparation.


References


52% of FY2024 export-control violations stem from classification errors. Is your team covered?

METI's official FY2024 analysis shows over half of all violations trace back to item classification. Run our 3-minute compliance check to see where your gaps are.

Share this article if you found it useful

シェア

Newsletter

Get the latest AI and DX insights delivered weekly

Your email will only be used for newsletter delivery.

無料診断ツール

輸出管理のリスク、見えていますか?

3分で分かる輸出管理コンプライアンス診断。外為法違反リスクをチェックしましょう。

Learn More About TRAFEED

Discover the features and case studies for TRAFEED.