OBS_VALUE: There is no prohibition against ‘disclosing’ personal information outside Australia (disclosure may include allowing an overseas-based person to access information physically stored in Australia), but an APP entity must take reasonable steps to ensure that an overseas recipient will handle an individual’s personal information observing the APPs, and the APP entity will be deemed liable for the acts of the overseas entity if those acts would amount to a breach of the APPs in Australia if done by the disclosing entity in Australia. Note also that there is an exception to the ‘deemed liability’ provisions if the relevant individual consents to the disclosure of their personal information outside of Australia and is told that by consenting their information will not be treated in accordance with the APPs. This exception is relatively new and is not widely relied on. ('Getting the Deal through', https://www.lexology.com/gtdt/tool/jurisdictions/report/12998821-efb8-48b9-9934-a07302e718c2)