Japan's Whistleblower Protection Act: What Changes at 300 Employees
Japan's amended Whistleblower Protection Act (公益通報者保護法) sets a specific headcount threshold that changes what's legally required, not just what's recommended: companies with more than 300 employees are required to establish an internal reporting system and designate specific individuals - 従事者 (jujisha), often translated as designated handlers - to receive and handle reports. Companies below that threshold are only under a best-efforts obligation to do the same.
That distinction matters more than it might first appear, because "required" versus "best efforts" changes what a compliance officer needs to be able to demonstrate, and what happens if they can't.
What crossing 300 employees actually obligates a company to do
Establish an internal whistleblowing system that's genuinely accessible to workers. Designate specific individuals as handlers of whistleblower reports - not a department in the abstract, but named people with the role formally assigned. Take appropriate measures to protect whistleblowers from retaliatory treatment. And critically: the designated handlers themselves are bound by confidentiality obligations with criminal penalties attached to unauthorized disclosure of a whistleblower's identity.
That last point is the part that surprises companies used to Western compliance frameworks. In the EU Directive or under PIDA, confidentiality is a strong expectation with civil and reputational consequences for getting it wrong. In Japan's framework, for a designated handler specifically, it's a criminal matter.
Why this changes what a company needs from its reporting system
A system that treats "who can see this report" as a loose permissions question - a role called "investigator" that any manager could theoretically be assigned to - doesn't reflect the legal weight of the designated handler role once a company crosses 300 employees. The people in that role need to be formally, trackably designated, and the system granting them access needs to reflect that designation specifically, not just a generic "case handler" permission that happens to be used for Japan too.
How this is handled structurally in Rectifia
The Designated Handler register exists as a distinct feature, dormant until JP appears in a company's configured jurisdictions array. When activated, it isn't a relabeled version of the generic case-handler role - it exists specifically because this is a distinct legal designation with its own confidentiality weight, and conflating it with a general-purpose "investigator" permission would understate what the role actually carries with it under Japanese law.
For a company approaching the 300-employee threshold, this is also a point worth revisiting jurisdiction configuration proactively rather than waiting until headcount crosses the line and the obligation becomes mandatory rather than best-efforts.
What this isn't
This is a description of a legal structure as we understand it, not legal advice, and it isn't a substitute for review by counsel with expertise in Japanese labor and whistleblower law - particularly given how recently these amendments took effect and how implementation guidance may continue to evolve. If your company operates in Japan and is approaching or has crossed the 300-employee threshold, that's a conversation to have with counsel directly, informed by - not replaced by - what your reporting software supports.