Latest News
Hot Issues
Estate planning considerations
5 checklists to support your business
Are you receiving Personal Services Income?
What Employment Contracts Does My Small Business Need?
The superannuation changes from 1 July
Hasty lodgers twice as likely to make mistakes, ATO warns
Landlords who ‘double dip’, fudge deductions in ATO crosshairs
Most Spoken Languages in the World
Tax Time Checklists - Individuals; Company; Trust; Partnership; and Super Funds
Compare your business
2024 Year End Tax Planning Guide (Part 2)
ATO to crack down on rental income, WFH deductions this tax time
How to Draft a Standard Form Contract
GST, PAYG withholding a ‘significant portion’ of $50bn tax debt
ATO changes will make it harder for over 42,000 small businesses.
The Deadliest pandemics in History
Budget breakdown – Federal Government Analysis
Federal Budget 2024
Winners & Losers
2024 Year End Tax Planning Guide (Part 1)
Medicare levy surcharge OR basic health insurance ?
ATO warns of ‘serious penalties’ for unlawful tax scheme promoters
ACCC scam report
Employees taking more sick days - and it's getting worse
Foreign residents selling property in Australia
How much does negative gearing really cost – an overview and an opinion?
The Shortest-reigning Monarchs in History
FBT Reminder – Odometer Reading
ATO’s debts on hold campaign prompts new IGTO guidance
A comprehensive collection of small business benchmarks
The 2025 Financial Year tax & super changes you need to know!
Underperforming employees: When can you terminate?
Articles archive
Quarter 2 April - June 2024
Quarter 1 January - March 2024
Quarter 4 October - December 2023
Quarter 3 July - September 2023
Quarter 2 April - June 2023
Quarter 1 January - March 2023
Quarter 4 October - December 2022
Quarter 3 July - September 2022
Quarter 2 April - June 2022
Quarter 1 January - March 2022
Quarter 4 October - December 2021
Quarter 3 July - September 2021
Quarter 2 April - June 2021
Quarter 1 January - March 2021
Quarter 4 October - December 2020
Quarter 3 July - September 2020
Quarter 2 April - June 2020
Quarter 1 January - March 2020
Quarter 4 October - December 2019
Quarter 3 July - September 2019
Quarter 2 April - June 2019
Quarter 1 January - March 2019
Quarter 4 October - December 2018
Quarter 3 July - September 2018
Quarter 2 April - June 2018
Quarter 1 January - March 2018
Quarter 4 October - December 2017
Quarter 3 July - September 2017
Quarter 2 April - June 2017
Quarter 1 January - March 2017
Quarter 4 October - December 2016
Quarter 3 July - September 2016
Quarter 2 April - June 2016
Quarter 1 January - March 2016
Quarter 4 October - December 2015
Quarter 3 July - September 2015
Quarter 2 April - June 2015
Quarter 1 January - March 2015
Quarter 4 October - December 2014
Key Considerations When Sharing Personal Information with Overseas Contractors

Engaging overseas contractors can be an effective way for businesses to respond to their business needs. However, while there are many advantages to hiring overseas contractors, you must consider this against legal risks, such as the risk of sharing the personal information of Australian individuals with overseas parties.


This article considers how you can comply with your privacy obligations under the Australian Privacy Principles outlined in the Privacy Act 1988 (Cth) when disclosing information with overseas contractors.

Are You an APP Entity?

Before sharing information with an overseas contractor, you must determine if you are an APP entity. This distinction is important because if an APP entity shares information overseas and that overseas party breaches the APPs, that breach will be taken to be a breach by the APP entity itself.

For example, suppose your business generates more than $3 million in annual turnover. In that case, it will likely be considered an APP entity and will have obligations under the Privacy Act, including concerning the disclosure of personal information overseas.

Sharing Information With Overseas Contractors

Suppose you are an APP entity. If so, let us explore several precautionary measures you can take when sharing information with your overseas contractors.

1. Privacy Policy

Before sharing information with any third party (including overseas contractors), you should review the terms of your privacy policy to ensure that you have informed your customers that you will share their personal information with overseas contractors.

If you have yet to inform customers of this intended use, you can update your privacy policy and provide notice of this to your customers. You should aim to give your customers at least 30 days’ notice before the privacy policy comes into effect. Accordingly, this will allow your customers to inform you of any issues with your intended use of their personal information before you disclose it.

2. Risk Mitigation

As a best practice, you should only share information essential for your overseas contractors to be able to deliver the services.

When engaging an overseas contractor, consider the following questions.

1. Whether the volume of information you are sharing with the contractor is necessary to enable them to perform the services?

  • Tip: As a rule, do not provide the contractor with more personal information than is necessary. The more information you share, the higher the risk of individuals using data in a way that breaches the APPs.

2. What is the nature of the information?

  • Tip: You should consider the nature of the information, and whether it is personal or sensitive information. Sensitive data requires a higher level of confidentiality due to its delicate nature.

3. How much access does the contractor have to my existing databases?

  • Tip: Ensure that you only provide access to the databases that the contractor needs to perform their services. All other access should be limited or subject to your approval.

3. Contractual Terms

You should ensure that the terms of your contractor agreement impose strong privacy obligations on the contractor, particularly concerning any personal information they receive or have access to during the term.

You can include clauses addressing the following:

  • an acknowledgement by the contractor that you are required to comply with the APPs;
  • a warranty that the contractor will not breach the APPs;
  • an indemnity by the overseas contractor if it breaches the APPs (for example, by disclosing personal information to an unauthorised party); and
  • a data breach response plan that includes a straightforward process for reporting a data breach.




Saya Hussain
April 18

Privacy Policy | Disclaimer