Japan weighs wider communications monitoring to detect cyberattacks

Japan is considering widening its government's communications monitoring to encompass exchanges within the country, a significant shift from current laws that limit surveillance to international communications or those routed through Japan. This proposed expansion is a core component of the nation's "active cyberdefence" strategy, which aims to identify and neutralize cyber threats before they materialize. Recent personal data breaches have intensified these discussions, with ruling party members contending that existing information-gathering capabilities are insufficient to prevent sophisticated attacks.

Under the active cyberdefence program, detection of potential attacks through government monitoring would trigger intervention by police and the Self-Defense Forces to hack into and neutralize attackers' servers. Provisions for these threat-neutralization operations became effective last month, with the broader communications monitoring planned to commence by next autumn. Officials, including former digital transformation minister Masaaki Taira, suggest that domestic communications cannot remain a "black box" if the country is to respond effectively to cyber threats.

The discussions, initiated by Prime Minister Sanae Takaichi, involve careful consideration of legal revisions and the development of an emergency response package. While Chief Cabinet Secretary Minoru Kihara stated the government would "conduct discussions from the perspective of strengthening information-gathering capabilities," the proposal has raised concerns about its compatibility with Japan's constitutional guarantee of communications secrecy. The government and ruling bloc plan to seek expert opinions to address these constitutional questions, indicating an ongoing debate regarding the balance between national security and individual privacy.