Japan has enacted the Active Cyber Defense Law (“ACD”) — a landmark legislative framework that empowers both the public and private sectors to proactively defend against cyber threats.
This law was enacted on 16 May 2025 and will take full effect by 2027, following a phased implementation.
The ACD has four strategic pillars: