It's hard to find resources in English describing the Cybersecurity environment and posture in Japan, but having worked with Japanese organizations in that space, they have decent talent but middling institutional knowhow and process. Basically slight more competent Germans if I'm being honest. On the other hand, South Koreans organizations tend to have their shit together.

Surveillance:

https://theintercept.com/2018/05/19/japan-dfs-surveillance-a...

https://www.nytimes.com/2022/02/02/business/japan-elderly-su...

https://giswatch.org/en/country-report/communications-survei...

Cybersecurity:

legal framework - https://iclg.com/practice-areas/cybersecurity-laws-and-regul...

policy - https://thediplomat.com/2022/09/japan-needs-a-cyber-ministry...