Privacy policy gap check for Japan APPI and GDPR basics

What it does

Checks a Japanese or English privacy policy read-only and lists whether commonly expected items are present.

• General: data collected, purposes of use, third-party sharing, contact point, cookies and analytics, children, how changes are announced, effective or last-updated date
• Japan APPI: operator name, address and representative, outsourcing, joint use, transfers to third parties abroad, security control measures, procedures for disclosure, correction and suspension requests, personally related information
• Japan Telecommunications Business Act external transmission rules (for covered businesses)
• GDPR basics: controller identity, DPO, legal basis, data subject rights, withdrawing consent, complaints to a supervisory authority, transfers outside the EEA with safeguards, automated decision-making, retention

Each item is marked present (with quotes and line numbers), weak (a single match) or missing. The agent reads the whole policy, marks items that do not apply with a reason, checks current official sources and writes the report. The checklist is JSON, so you can add items or wording.

How to use

python scripts/privacy_gap_check.py policy.md --scope general,appi,jp-telecom --out gap-report.md
python scripts/privacy_gap_check.py privacy.html --scope general,gdpr --format json --out gap.json

Requirements

• Python 3 (standard library only)
• Text, Markdown or HTML files (UTF-8 or Shift_JIS)

Caveats

• Not legal advice. It is a keyword-based review aid and never concludes that a policy complies with the law. Consult a qualified professional for important decisions.
• A heading without real content can still count as present, so the quoted passages must be read.
• Laws and guidelines change; check the current official texts.
• No file edits and no network access.