diff --git a/defender-for-identity/technical-faq.yml b/defender-for-identity/technical-faq.yml index 51edf3c877..0f0a0fa8a9 100644 --- a/defender-for-identity/technical-faq.yml +++ b/defender-for-identity/technical-faq.yml @@ -87,6 +87,10 @@ sections: - question: Is my data isolated from other customer data? answer: Yes, your data is isolated through access authentication and logical segregation based on customer identifiers. Each customer can only access data collected from their own organization and generic data that Microsoft provides. + - question: When using Microsoft Defender for Identity (MDI), is end-user consent required for overseas data transfer under Japan’s Act on the Protection of Personal Information (APPI)? + answer: | + No, end-user consent is not required. Providing personal data to MDI constitutes “outsourcing” rather than a “provision to a third party in a foreign country” under the APPI. Therefore, explicit end-user consent for cross-border data transfer is not necessary. + - question: Do I have the flexibility to select where to store my data? answer: | No. When your Defender for Identity workspace is created, it's stored automatically in the Azure region that's closest to your Microsoft Entra tenant's geographical location. Once your Defender for Identity workspace is created, Defender for Identity data can't be moved to a different region.