Then legitimacy is lower, because in Japan they, like us, used to have data protection authorities distributed throughout the ministries. Because of GDPR, they are now also working on liaison office that can serve as a kind of final arbiter of such tanks.