ANL | International transfers

In some instances we may collect and use your personal information in the European Union (EU) or the UK, or offer goods or services to individuals located in the EU or the UK. When we do so we are regulated under the General Data Protection Regulation (GDPR) which applies across the EU and the UK.

Further, some of our external third parties may be based outside the country where the information is collected or sourced including the EU, the UK and the United States. Whenever we transfer your personal information internationally we ensure a similar degree of protection is afforded to it as in the original source country by ensuring at least one of the following safeguards is implemented:

1 We may transfer your personal information to an overseas recipient located in countries where we reasonably believe that your personal information will be protected in a way that, overall, is at least substantially similar and comparable to the way in which the Australian Privacy Principle or the New Zealand’s Information Privacy Principle protects the information. This includes, but is not limited to, Singapore, the EU, UK and/or the United States of America; or
2 Where your information is transferred to a country we reasonably consider does not have the same level of data protection as Australia or New Zealand, we will ensure that your personal information is subject to appropriate safeguards to protect your information (e.g. a legally binding contract containing model privacy clauses); or
3 Where we use providers based in the US we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal information shared between Europe and the US.