Qstamp / Japan
Regulatory alignment · Japan

Japan obligations for financial institutions, tax records, signatures and data.

The Financial Services Agency has asked financial institutions to prepare for post quantum cryptography, CRYPTREC guides the choice of algorithms, and Japanese law sets duties for electronic tax records, electronic signatures, payment instruments, security tokens and personal information. This page maps each to the mechanisms of the Qstamp family.

Migration post-quantique

Financial Services Agency and CRYPTREC.

InstrumentExigenceComment la famille Qstamp y répondDates
Financial Services Agency study group report on post quantum cryptographyInventory of cryptography and a transition plan for financial institutionsAlgorithmes post-quantiques normalisés par le NIST dans l’ensemble du systèmeReport published 2024, migration in the early 2030s
CRYPTREC guidanceRecommended cryptographic algorithms and transition guidanceML DSA, ML KEM and SHA3 under the NIST standardsEn vigueur
Basic Act on Cybersecurity, Act No. 104 of 2014Cybersecurity of government and critical infrastructurePreuve d’intégrité pour les registres opérationnels et les logicielsEn vigueur
Finance

Payment instruments and security tokens.

InstrumentExigenceComment la famille Qstamp y répondDates
Payment Services Act, Act No. 59 of 2009Electronic payment instruments and their intermediariesSigned issuance records and anchored reserve attestationsStablecoin amendment in force June 2023
Financial Instruments and Exchange Act, Act No. 25 of 1948Electronically recorded transferable rightsAnchored register snapshots and prospectus versionsEn vigueur
Records, signatures and data

Tax records, signatures and personal information.

InstrumentExigenceComment la famille Qstamp y répondDates
Electronic Books Maintenance ActHorodatages ou pistes d’audit pour les documents fiscaux conservés électroniquementEnregistrements signés avec horodatages ancrés et chaînes de registres QTaxEn vigueur
Act on Electronic Signatures and Certification BusinessPrésomption légale pour les signatures électroniques remplissant ses conditionsSignatures post-quantiques avec une procédure de vérification publiéeEn vigueur
Act on the Protection of Personal Information, Act No. 57 of 2003Protection des informations personnelles et mesures de contrôle de sécuritéSeuls des engagements cryptographiques salés quittent l’organisationEn vigueur
AI Promotion Act 2025Promotion de la recherche, du développement et de l’usage approprié de l’IAEnregistrements traçables des systèmes d’IA et de leurs résultatsAdoptée en 2025
Checklist

Five steps for Japan.

Follow the Financial Services Agency report on the transition of financial institutions to post quantum cryptography.

Choose algorithms in line with CRYPTREC guidance and the NIST standards.

Keep time stamped tax records under the Electronic Books Maintenance Act with QTax.

Use electronic signatures with a published verification procedure under the Act on Electronic Signatures and Certification Business.

Issue electronic payment instruments and security tokens under the Payment Services Act and the Financial Instruments and Exchange Act.

Questions

Questions institutions ask.

What does the Financial Services Agency expect?

The Financial Services Agency has published a study group report that asks financial institutions to inventory their cryptography and plan the transition to post quantum cryptography, with priority systems migrated in the early 2030s.

Does Qstamp meet the Electronic Books Maintenance Act?

Qstamp provides time evidence and audit trails for electronically stored tax records. The taxpayer remains responsible for meeting the conditions of the Act.

Does any personal information leave our systems?

No. Only salted commitments are anchored, which supports the security control measures of the Act on the Protection of Personal Information.

Périmètre

Comment lire cette page.

Les dates et les exigences reflètent la position publiée en octobre 2026. Qstamp fournit une preuve technique d’intégrité, de paternité et d’horodatage qui vient appuyer ces obligations. Elle ne rend pas, par elle même, une organisation conforme, et chaque organisation demeure responsable de ses propres obligations.