K3 Moonshot · High · Chat

Here's a breakdown of Japan's cold outreach rules and how Japanese companies actually work around them.

The regulatory landscape

Cold email — the strictest channel

Japan is one of the most restrictive jurisdictions in the world for cold email. The Act on Regulation of Transmission of Specified Electronic Mail （特定電子メール法， amended 2008) requires prior opt-in consent before sending commercial email — you cannot legally blast unsolicited pitches the way you can in the US under CAN-SPAM's opt-out model. The law also applies to foreign senders targeting recipients located in Japan.

Key requirements:

• Consent records must be kept — under the ASCT, proof of consent is retained for three years after the last email.
• Every email must include sender identification (company name, address, contact info) and a working opt-out mechanism.
• Auto-generated or "dictionary attack" addresses are explicitly banned.
• Penalties: up to ¥30 million for corporations, plus public naming by regulators.

The critical B2B carve-out: consent isn't required for email sent to an address the recipient has voluntarily disclosed for business purposes — e.g., a contact address published on a corporate website, or a business card exchanged at an event. Personal Gmail/Yahoo addresses don't qualify, even if used for work.

Cold calling — less regulated than email

Telephone solicitation rules under the Act on Specified Commercial Transactions （特定商取引法） mainly target consumer sales: callers must identify themselves and their purpose upfront, and once a consumer says no, re-solicitation is prohibited. Pure B2B cold calling is largely outside these consumer-protection provisions, though it runs into APPI issues around how you obtained the contact data, and it carries a strong cultural stigma (more on that below).

APPI — the data layer

The Act on the Protection of Personal Information governs how you acquire and use contact data. Buying scraped lists or improperly sharing personal data can trigger PPC enforcement — corrective orders, and for serious violations, entity fines up to ¥100 million. An amendment passed in July 2026 will give the regulator power to impose administrative fines for improper data acquisition or unlawful third-party provision, expected to take effect by 2028.

How domestic companies actually deal with it

Japanese sales culture and regulation reinforce each other — the result looks very different from US-style outbound:

1. Business cards and events as the consent mechanism. The meishi (business card) exchange isn't just etiquette — it's the classic legal basis for the "voluntarily disclosed for business purposes" exemption. Trade shows, seminars （セミナー), and industry association events are structured lead-generation machines precisely because exchanging cards there legitimizes follow-up.

2. Database platforms with built-in provenance. Services like Sansan digitize business cards so the consent trail is automatic, and B2B data providers (Baseconnect, SalesNow, etc.) sell lists of publicly disclosed corporate addresses — which map to the B2B carve-out — rather than personal addresses. Companies log the source URL and date for each address to defend the exemption.

3. Referral-first selling （紹介営業）. Warm introductions through banks, trading companies, existing customers, and industry associations are the dominant enterprise sales channel. Cold outreach to a stranger without any connection is culturally suspect regardless of legality — it signals you lack a network.

4. Inbound marketing as the substitute. Content marketing, whitepaper downloads, and webinar registrations generate opted-in leads that can be legally emailed and called. Many Japanese B2B companies (especially SaaS) have shifted budget from outbound to inbound/SEO for exactly this reason.

5. "Forms sales" （フォーム営業） as a gray zone. A distinctly Japanese workaround: instead of emailing individuals, reps submit pitches through the inquiry form on a company's official website. It's legal because that address/form is published for business inquiries — though mass-automated form spam has drawn criticism and some companies now block it.

6. Cold calls survive, but softened. B2B "teleapo" (telephone appointment) agencies are a real industry, but scripts are heavily formalized: identify company and caller immediately, ask for the relevant department rather than a named person (avoiding personal-data issues), and accept refusal instantly. Aggressive US-style cadences are rare.

Bottom line: Japan's regime is opt-in for email with narrow B2B exemptions, consumer-focused but culturally constraining for calls, and increasingly strict on data sourcing. Domestic companies respond not by fighting the rules but by engineering consent capture into everything — cards, forms, events, referrals — so that by the time they reach out, it rarely counts as truly "cold."

If you're planning outreach into Japan specifically (e.g., as a foreign company), I can go deeper on compliant sequence design or the deliverability side (Docomo/KDDI filtering, Japanese mailbox providers).