Invitation for Public Comments on “New Data Management Methods and Framework to Promote Value Creation through Data”

1. Background and purpose

METI launched the 3rd layer Task Force under the Study Group for Industrial Cybersecurity on July 31, 2019, and started discussions concerning relevant requirements in order to ensure the trustworthiness of data.

In an industrial society where cyberspace and physical space are highly integrated, data is freely exchanged and will be used to create new data to provide added value. Data itself must be correct for these connections in cyberspace and is the anchor point for ensuring the trustworthiness of the value creation process as it serves as a basis for the creation of added value (value creation).

In order to implement comprehensive security measures based on the anchor point of trustworthiness of data itself, it is necessary to identify risks that exist throughout the data life cycle to implement various measures to ensure security.

The Task Force has drafted “New Data Management Methods and Framework to Promote Value Creation through Data (Tentative)” to place emphasis on data, present a visual representation of the status of the data flowing between entities and identify the risks throughout the data life cycle, and make it possible to implement the measures that are necessary to ensure security through appropriate data management.

In the framework, data management is defined as “managing the processes during which data properties change due to events in the domains based on the life cycle” and organized into a model consisting of three elements that are in a mutually influential relationship: “event” (generation/acquisition, processing/usage, transfer/provision, storage, and disposal), “domain” (e.g. the laws and regulations of each country/region, internal rules stipulated by organizations, and contracts exchanged individually between organizations) and “property” (e.g. category, scope of disclosure, purpose of use, data controller and data rights holder).

METI hopes that the three elements provide clarity on the status of data flow, and that all stakeholders are able to individually ensure appropriate data management based on a common understanding of the data flow.

METI invited public comments on the framework outline (draft) from July to October 2021. The current version of “New Data Management Methods and Framework to Promote Value Creation through Data (Tentative)” (Draft) reflects the feedback from these comments while also adding Use Cases and Illustration of the Identified Risks of Each Event as appendixes.

METI invites public comment on the draft in order to receive a diverse range of feedback.

2．Topic for comments

• “New Data Management Methods and Framework to Promote Value Creation through Data (Tentative)” (Draft)

3. Due date

E-mail responses

Please send your comments before 24:00, March 3, 2022 (Japan Standard Time, UTC+0900).

Postal responses

Please send your comments by March 3, 2022 (Japan Standard Time, UTC+0900).

4．Submission of comments

Please provide your comments in either Japanese or English.
Please specify which headings in the draft your comments are addressing.
Please provide your name and affiliation (individual, company, or group). In the case of companies or groups, include your department name and title. Please also provide your contact information (address, phone number, and e-mail address). Your comments can be submitted via one of the following methods:

E-mail

bzl-cybersec_comment@meti.go.jp

Please include “Data Management Methods and Framework Comments” in the subject line.

Postal mail

Send your document to the attention of:

Cybersecurity Division
Commerce and Information Policy Bureau
Ministry of Economy, Trade and Industry
1-3-1 Kasumigaseki
Chiyoda-ku, Tokyo 100-8901, Japan

Please write “Attention: Data Management Methods and Framework Comments” on the envelope.

5. Notes

• Content of the comments will likely be made public. However, name, affiliation and contact information will not be disclosed to the public without the commentor’s explicit consent.
• Personal information included with your comments, such as your name and contact information, will be kept confidential and used only for administrative purpose such as contacting you if we have questions concerning your comments.
• Not all comments will necessarily be adopted in the guide.
• We will not respond directly to individual comments.

Division in Charge

Cybersecurity Division, Commerce and Information Policy Bureau