# APPI Compliance Assessment Record

## Organisation Details

| Field | Value |
|-------|-------|
| Organisation Name | Zenith Global Logistics Japan K.K. (ゼニス・グローバル・ロジスティクス日本株式会社) |
| Corporate Number | 1234567890123 |
| Address | 15F, Marunouchi Park Building, 2-6-1 Marunouchi, Chiyoda-ku, Tokyo 100-6915 |
| Assessment Date | 14 March 2026 |
| Privacy Manager | Tanaka Yuki, Chief Compliance Officer |

## Cross-Border Transfer Register

| Transfer ID | Destination | Mechanism | Pre-Transfer Info | Status |
|------------|-------------|-----------|-------------------|--------|
| CBT-JP-001 | Germany (EU) | Adequate country | N/A | Active |
| CBT-JP-002 | Singapore | Consent + pre-transfer info | Singapore PDPA briefing | Active |
| CBT-JP-003 | Thailand | Consent + pre-transfer info | Thailand PDPA briefing | Active |
| CBT-JP-004 | UK | Adequate country | N/A | Active |

## Pseudonymously Processed Information Register

| Data Set | Purpose | Method | Additional Info Separated | Review Date |
|----------|---------|--------|--------------------------|-------------|
| Customer shipping analytics | Route optimisation (internal) | Tokenisation + generalisation | Yes | Mar 2027 |
| Employee performance trends | Workforce planning (internal) | Department-level aggregation | Yes | Jun 2026 |

## Third-Party Provision Record Log

| Date | Recipient | Individual | Data Items | Consent Basis | Retention Until |
|------|-----------|-----------|------------|--------------|-----------------|
| 15 Jan 2026 | Customs Authority | Yamada Taro | Name, passport, customs ID | Legal obligation | Jan 2029 |
| 1 Feb 2026 | Insurance Co. | Suzuki Hanako | Name, shipment details | Consent | Feb 2029 |

## Compliance Checklist

| Requirement | Article | Status |
|------------|---------|--------|
| PPC registration | Art. 26 | Compliant |
| Privacy policy in Japanese | Art. 32 | Compliant |
| Special care-required info consent | Art. 20(2) | Compliant |
| Cross-border pre-transfer info | Art. 28 | Compliant |
| Individual rights (2022 expanded) | Arts. 33-35 | Compliant |
| Pseudonymisation programme | Art. 41 | Compliant |
| Third-party provision records | Arts. 29-30 | Compliant |
| Breach notification procedure | PPC Guidelines | Compliant |
| Annual APPI training | Best practice | Compliant |