Japan is planning to establish a public-private council on economic security. Financial institutions required to participate will have to build rigorous information management regimes. With the data security provisions of the Economic Security Promotion Act’s forthcoming amendment still under discussion, financial institutions should start preparing early instead of waiting until the amendment is finalized. Such preparations should reference European and US regulation and address matters such as PII handling and outsourcing controls.