PMDA announces new cybersecurity measures after information leak incidents
Published · Updated
What happened
PMDA published a security policy response on October 26 following recent cyberattack cases that resulted in information leaks. The agency said it will strengthen its security controls for systems and information used in pharmaceutical and medical device review and administration.
Why it matters
PMDA is a central regulator for drug and medical device review, safety, and related data handling in Japan. A cyber incident at PMDA can disrupt regulatory processing, expose sensitive data held by the agency, and require counterparties in industry and healthcare to adjust submission and security practices.
Japan's Pharmaceuticals and Medical Devices Agency (PMDA) said on October 26 that it will implement new security measures after recent cyberattack-related information leak incidents. The agency said the measures are intended to strengthen protection of sensitive medical information and maintain the integrity of pharmaceutical and medical device data handled by PMDA. The announcement turns a recent security incident into an operational policy change at a core health regulator, with implications for regulator continuity, industry submissions, and confidence in medical-data handling.
Watch for
PMDA publication of an implementation timetable or technical appendix for the new security measures by 2026-10-29 Japan's Ministry of Health, Labour and Welfare acknowledgement of PMDA's measures or issuance of related cybersecurity instructions by 2026-10-29 PMDA notice on any temporary changes to electronic submission, review processing, or applicant communications by 2026-10-29 No PMDA disclosure by 2026-10-29 of additional affected data categories or expanded scope of information leakage
Sources
- サイバー攻撃による情報漏えい等の事案を踏まえたPMDAにおけるセキュリティ対策方針について · pmda.go.jp