[The Japanese legal system and the applicability of laws and regulations on private information protection and research ethics relating to medical research].

Objectives　To clarify the structure, applicability, and objectives of the current Japanese legislation for private information protection and research ethics and to examine the clauses of the related laws/regulations for academic research purposes.Methods　The research design is a descriptive study based on a systematic literature review. Using the "e-Gov" database, the laws/regulations relating to private information protection and research ethics that apply to medical research involving human subjects and human genome/gene analysis research were included in the research. The Drugs Law (Law No. 145 of 1960) and related GCP/GPSP regulations and laws/regulations on administrative organizations, management, and procedures were excluded. Furthermore, the guidelines and Q&A relating to these laws/regulations and all 47 prefectural regulations on private information protection have been selected from the websites of the related ministries, government organizations, and prefectures.Results　Our study demonstrated that the current legal system on private information protection consists of three layers and that the applicability of the laws/regulations in this area varies according to the type of research organization. Additionally, the applicability of the laws/regulations on research ethics is different depending on the research area. While the Private Information Protection Law (PIPL) for the private sector contains two objectives, PIPL for administrative organizations and PIPL for independent administrative organizations both include three objectives. For academic research purposes, PIPL for the private sector sets out a holistic exemption clause, whereas the other two PIPLs stipulate three specific exemption clauses. Furthermore, our research revealed that the clauses of the prefectural regulations demonstrated many variances.Conclusion　This study suggests that the current Japanese legal system relating to private information protection could be defined as a "mixed model," wherein the laws/regulations concerned are not necessarily consistent. The protection of medical information is solely regulated by a few specific laws with a narrow scope of application; the ethical guidelines are not directly based on any laws; and identifying applicable laws/regulations, depending on the category of research organization, is complicated, especially in the case of collaborative research involving researchers from various organizations. Therefore, in the larger framework of legislation, it is indispensable to reconsider the protection of private medical information and its effective use, including the ethics of this process because of the sensitive and useful nature of private medical information.