Complying with transfer of personal data obligations under Australian law

As a general guide, personal data in Australia may be equated with the definition of “personal information” under the Privacy Act 1988 (Cth) (Privacy Act). The transfer of such data (and its collection) overseas by Australian-based organisations is primarily regulated by the Privacy Act, and within the Act the Australian Privacy Principles (APPs). APP 8 — Cross-border disclosure of personal information is the most relevant in respect of transferring data out of Australia.