/**
 * Japan APPI (Act on Protection of Personal Information) Compliance Pack
 *
 * Regulation: Act on Protection of Personal Information (個人情報の保護に関する法律)
 *             Act No. 57 of 2003; comprehensive amendment 2020 (effective 2022);
 *             further amendments 2021/2022; ongoing PPC guidance updates.
 *
 * Jurisdiction: JP (Japan)
 * Regulator: Personal Information Protection Commission (PPC, 個人情報保護委員会)
 *             Established under the 2016 revision; supreme authority for APPI enforcement.
 *
 * Scope:
 *   Applies to any "business operator handling personal information" (個人情報取扱事業者)
 *   -- any entity that processes personal information of individuals in Japan for
 *   business purposes, including overseas entities doing business in Japan
 *   (extra-territorial scope introduced in 2020 amendment).
 *
 * Key data categories:
 *   1. Personal information (個人情報): any information relating to an identified or
 *      identifiable living individual, including name, DOB, and any information that
 *      combined with other data enables identification.
 *   2. Special care-required personal information (要配慮個人情報): sensitive data --
 *      race, creed (信条), social status (社会的身分), medical history, criminal record,
 *      crime victim history, disability. Requires opt-in consent.
 *   3. Personal related information (個人関連情報): cookies, advertising IDs, and
 *      other web browsing records that can be combined with other data to identify an
 *      individual. Introduced in 2020 amendment.
 *   4. Pseudonymously processed information (仮名加工情報): de-identified but can be
 *      re-linked with a key; special handling rules.
 *   5. Anonymously processed information (匿名加工情報): irreversibly de-identified;
 *      cannot be re-linked.
 *
 * Key obligations:
 *   1. Purpose of use: must specify purpose before or at time of collection and disclose
 *      publicly. Processing beyond specified purpose requires new consent.
 *   2. Opt-in consent for special care-required personal information.
 *   3. Third-party transfer restriction: consent (opt-in) required for transfer to third
 *      parties, OR opt-out (オプトアウト) procedure with PPC notification for certain
 *      categories (not applicable for special-care data -- must use opt-in).
 *   4. Cross-border transfer restriction: PPC-recognized adequate countries (currently
 *      EU per GDPR adequacy, UK) OR additional contractual safeguards equivalent to
 *      Japanese standards (similar to but NOT identical to GDPR SCCs).
 *   5. Data subject rights: disclosure (開示), correction (訂正), addition (追加),
 *      deletion (削除), suspension of use (利用停止), erasure (消去), and third-party
 *      transfer record disclosure.
 *   6. Breach notification to PPC and affected individuals: within 60 days for reportable
 *      incidents. "Reportable" = leak, loss, or unauthorized provision of personal
 *      information that could cause significant harm. Expedited 30-day report for
 *      likely unauthorized use or large-scale leakage.
 *      IMPORTANT: Verify against latest PPC guidance for current deadlines.
 *   7. DPO-equivalent (個人情報保護管理者) designation recommended; mandatory for
 *      certain regulated sectors.
 *   8. ROPA-equivalent: internal records of personal information holdings required.
 *
 * Critical cross-border transfer rule:
 *   Diverges significantly from GDPR. Pack must:
 *   (a) Check destination country against PPC's current adequacy list
 *       (EU, UK as of 2023 PPC determination -- verify current list).
 *   (b) For non-adequate countries: require contractual safeguards with the
 *       overseas recipient ensuring equivalent APPI-standard protections.
 *   (c) Disclosure to data subject of cross-border transfer destination REQUIRED.
 *   (d) Third-party transfer records must be maintained and disclosed on request.
 *
 * Retention:
 *   Per business purpose (no fixed statutory minimum like GDPR 6/10 years).
 *   PPC requires periodic review and disposal when data is no longer needed.
 *   Third-party transfer records: 3 years.
 *   Breach notification records: retained as required by PPC guidance.
 *
 * @connexum/ai-governance
 */
import { CompliancePack } from './index';
import { CategoryClassifiers } from '../classification/pack-driven-classifier';
export declare const JP_APPI_CATEGORY_CLASSIFIERS: CategoryClassifiers;
export declare const JP_APPI_PACK: CompliancePack & {
    categoryClassifiers: CategoryClassifiers;
};
//# sourceMappingURL=jp-appi.d.ts.map