The progress of IT related technologies has had a significant affect on the medical and healthcare industry. In the medical area, medical records and databases have been digitized and computerized, and cloud services are increasingly employed by medical institutions that handle and manage huge amounts of large-size medical image data. On the other hand, the data handled in this area is often sensitive and it is, therefore, very important to protect such personal data and privacy. In Japan, in addition to laws, there are various guidelines established by the relevant ministries that apply to this area. Nishimura & Asahi’s attorneys with expertise in IT, personal data and privacy, and the relevant regulations regularly advise clients on new business models using the latest IT technologies and related contracts, as well as handle data breaches and other incidents.