An entity does not have to take reasonable steps to ensure that the overseas recipient does not breach the APP in relation to the information when it believes that the recipient is subject to a law, or binding scheme, that has the effect of protecting the information in a way that, overall, is at least substantially similar to the way in which the APP protect the information.