1. Introduction — From Data Breach to Legal Action
Following the Times Car data breach that exposed millions of user records, several Japanese law firms have begun organizing a class action lawsuit against Park24, the parent company of Times Car. The goal is to seek accountability and compensation for affected users whose personal information—including driver’s license images—was leaked.
I am one of the participants in this legal action, joining others who believe that corporate responsibility must extend beyond apologies.
2. What Is Happening Now
As of October 2026, multiple law firms—including Makino Law Office and others—have started collecting participants for the lawsuit. The process is still in the pre‑filing stage, meaning lawyers are gathering evidence, verifying participant eligibility, and preparing the formal complaint.
Current status:
- Participant registration ongoing
- Legal documents under review
- Filing expected within the next few months
- Estimated participants: around 3,000 people and growing
This stage is crucial because it determines the scope of damages and the legal foundation for compensation.
3. How Class Actions Work in Japan
Japan’s class action system differs significantly from the U.S. model. It is opt‑in, not automatic—meaning individuals must actively join the lawsuit.
Key features:
- Each participant signs a power of attorney (委任状)
- Lawyers represent the group collectively
- The court reviews whether the case qualifies as a “collective claim”
- Compensation is distributed only after the final judgment
This process is slow but structured, often taking 1–3 years before resolution.
4. Legal Grounds for the Lawsuit
The Times Car case is expected to rely on the following legal principles:
- Violation of the Act on the Protection of Personal Information (APPI) → Failure to properly manage and delete sensitive data
- Negligence under Civil Code Article 709 → Lack of adequate security measures
- Breach of contractual duty of care → Failure to protect user data as promised in service terms
These claims aim to establish that Park24’s data retention practices directly contributed to the breach.
5. What Participants Can Expect
Process overview:
- Submit participation form and ID verification
- Wait for official filing confirmation
- Receive updates from the law firm
- Attend optional briefings or online sessions
- Await court proceedings and judgment
Possible outcomes:
- Compensation range: ¥3,000–¥30,000 (approx. $20–$200)
- Duration: 1–3 years
- Attorney fees: 10–30% of awarded amount
While the financial reward may be modest, the symbolic value—holding a major corporation accountable—is significant.
6. Why This Lawsuit Matters
The Times Car case is more than a compensation claim. It represents a turning point in Japan’s corporate data culture, where “information as an asset” must evolve into “information as a responsibility.”
This lawsuit could set a precedent for:
- Mandatory deletion policies
- Stronger oversight of data retention
- Transparent disclosure of breaches
- Public awareness of privacy rights
For participants, it’s not just about money—it’s about changing how companies treat personal data.
7. Conclusion — Accountability Over Apology
The Times Car class action lawsuit is still in its early stages, but it already symbolizes a shift in Japan’s approach to data protection. Thousands of users, including myself, have joined to demand accountability and transparency.
Whether compensation ends up being ¥3,000 or ¥30,000, the true value lies in forcing systemic change—ensuring that companies no longer view personal data as something to store indefinitely, but as something to protect and respect.
コメント