Privacy Act 2020 NZPRV-5: IPP 11-12 Disclosure, Cross-Border Disclosure (Schedule 8)

Per IPPs 11-12 of Privacy Act 2020 + Schedule 8: disclosure + cross-border. Requirements include (a) IPP 11 - Limits on Disclosure of Personal Information - personal information should not be disclosed unless disclosure is one of the purposes for which it was collected + an exception applies + (b) IPP 12 - Disclosure of Personal Information Outside New Zealand - personal information may not be disclosed to a recipient outside NZ unless the recipient is subject to privacy laws comparable to Privacy Act 2020 + appropriate safeguards + individual consents + (c) maintain inventory of cross-border data flows + recipients + safeguards + (d) implement contractual + technical safeguards + (e) cooperate with Office of Privacy Commissioner (OPC) on transfer matters.