The European Commission issued its draft Decision on the adequacy of Japan's data protection law in September 2018. This article argues that the draft Decision, in relation to the private sector, does not contain sufficient justification that Japan meets the EU's criteria for adequacy, described...