The APPI only relates to individuals or entities that deal with personal information in the midst of their business enterprise. For this reason, a 'small business' usually means things to do which can be executed regularly for a certain reason and they are considered a company below social conventions; https://archerhztle.blogadvize.com/36498360/considerations-to-know-about-secure-my-data-tokyo-japan