OBS_VALUE: An APP entity may only hold, use or disclose personal information for the primary purpose for which it was collected, or any purpose related. The disclosure of personal information abroad can only occur when the data sender ensures that the recipient respects the requirements of the APP by entering into an enforceable contract with the foreign entity. Such a contract is not required where the data sender reasonably believes that the overseas recipient is subject to a law, or binding scheme, that has the effect of protecting the information in a way that, overall, is at least substantially similar to the way the information is protected under Australian law. The determination of this condition is done by the data senders themselves, who must “reasonably believe” that the laws applicable to the recipient provide substantially similar protection to the one listed in the APP. Higher standards apply for sensitive information and express consent must be given so that sensitive information is collected.