6.5Legal Affairs and Standardization

Legal affairs and standardization rest on three pillars: mechanisms that protect rights (intellectual property), mechanisms that uphold society's rules (various regulations, compliance), and mechanisms that preserve industry interoperability (standardization). Because laws are periodically revised, AP level 3 requires accurate understanding grounded in current official names and institutions—remembering an old name can lead directly to a wrong answer.

6.5.1Intellectual property rights

• Among intellectual property rights, copyright protects creative works such as programs and documents, and arises automatically at the moment of creation (no registration required). Copyright in a program generally belongs to the company if the requirements for a work made for hire (corporate authorship) are met, though this can also be set individually by contract—a practical point worth noting. Industrial property rights is the collective term for patent rights (inventions), utility model rights (devices), design rights (designs), and trademark rights (marks/brands); for all of these, filing and registration with the Patent Office is a requirement for the right to arise. The contrast of "registration required or not" is the most frequently tested point.

6.5.2Security-related regulations

• The Unauthorized Computer Access Law prohibits acts such as intruding into a system by using another person's ID and password without authorization. The Act on the Protection of Personal Information obligates businesses handling personal information to specify the purpose of use, acquire it properly, take safety-management measures, and restrict provision to third parties, among other duties. Compliance is required when a company develops or operates a system that handles personal information.
• The Act on Regulation of Information Distribution Platforms obligates large platform operators on internet platforms such as social media to respond to defamation and rights-infringing content (speeding up response to removal requests, publishing operational status, etc.)—renamed and expanded from the former "Provider Liability Limitation Act." Its main focus is speeding up and increasing the transparency of platform operators' response; take care not to confuse this with the old name's connotation of merely limiting/exempting liability.

6.5.3Labor/trade regulations and compliance

• The Worker Dispatch Act governs the three-way relationship among the dispatching agency, the client company, and the dispatched worker, defining limits on the dispatch period and the client company's obligations. Its hallmark is that the client company holds directive authority, unlike a contract for work (payment for a deliverable), where the contractor itself holds directive authority. Confusing this distinction creates the illegal situation of "disguised contracting" (a contract labeled as work-for-hire but where the client actually directs the workers directly)—a practical concern.
• The Act on Proper Subcontracting Transactions prohibits the ordering party (the commissioning enterprise) from abusing its superior bargaining position against the receiving party (the small/medium contracted enterprise)—for example, reducing payment, delaying payment, or demanding unjustified rework. Tested points include the party names, the obligation to issue a document stating the commissioned work, and the payment due date rule (in principle, within 60 days of receiving the deliverable). Compliance is a management stance of observing the full range of rules—not just laws, but internal regulations and corporate ethics too. Violations directly risk reputational damage and business suspension, making compliance a key pillar of internal control.

6.5.4Standardization

• ISO (International Organization for Standardization) formulates international standards (ISO 9001 = quality management, ISO 27001 = information security management, etc.) as part of standardization. JIS (Japanese Industrial Standards) are Japan's domestic standards, increasingly established in alignment with international standards. A de jure standard is an official standard established through the formal procedures of a public standardization body such as ISO/JIS. A de facto standard is a specification that became the standard in practice through market competition (the contrasting axis is that it did not go through a formal, official standardization procedure). The purpose of standardization is to ensure interoperability and smooth transactions.

Consider IT firm E developing a new social-media-integrated service and outsourcing part of it. Software developed in-house has copyright arising automatically at creation, belonging to E because it meets the requirements of a work made for hire, but for a newly devised, unique image-compression algorithm, the company considers filing for a patent (an industrial property right) to prevent imitation. Because the new service handles users' personal information, it builds in purpose specification and safety-management measures under the Act on the Protection of Personal Information. Since the service also has a comment feature between users, the company must plan its response to defamation and impersonation posts, preparing rapid response to removal requests and publication of operational status under the Act on Regulation of Information Distribution Platforms (renamed and expanded from the former Provider Liability Limitation Act). When outsourcing part of the development to a small external software company (a small-medium contracted enterprise), E, as the commissioning enterprise, complies with the Act on Proper Subcontracting Transactions—issuing a document stating the commissioned work and paying within 60 days of receiving the deliverable. When bringing in engineers from a staffing agency during a busy period, the company also observes the dispatch-period limit under the Worker Dispatch Act and makes clear that E, as the client company, holds directive authority. If this were instead run as a "business commission contract" on paper while E in practice gave direct instructions, that mismatch between contract form and reality would create the illegal state of "disguised contracting"—so compliance management that keeps the contract form aligned with where directive authority actually lies is essential. On the technical side, for the interface connecting services, the company distinguishes a de jure standard established through the formal procedures of a public body such as ISO/JIS (e.g., various web-related RFC standards) from a de facto standard that became widely adopted in the market without going through a formal procedure (e.g., a particular open-source library becoming the standard in practice), judging which to adopt from the standpoint of interoperability.

6.5.5Section summary

• Copyright = arises automatically at creation, no registration; industrial property rights (patent/utility model/design/trademark) = filing and registration required
• Act on Regulation of Information Distribution Platforms (formerly the Provider Liability Limitation Act) obligates large platforms to speed up removal response. Act on Proper Subcontracting Transactions = commissioning enterprise / small-medium contracted enterprise
• Worker Dispatch Act = the client company holds directive authority (versus the contractor under a contract for work). Distinguish de jure standard (formal procedure) from de facto standard (result of market competition)