I, Angelene Falk, Australian Information Commissioner, make this determination under subsection 72(4) of the Privacy Act 1988 (Privacy Act).
Dated: 14 February 2020
Signed
Angelene Falk
Privacy Commissioner
This determination is the Privacy (International Money Transfers) Generalising Determination 2020.
This public interest determination commences on the day of its registration on the Federal Register of Legislation maintained under section 15A of the Legislation Act 2003.
This public interest determination is made by the Australian Information Commissioner under subsection 72(4) of the Privacy Act.
The Privacy (International Money Transfers) Generalising Determination 2015 (FRLI - F2015L00201) is repealed immediately before this determination commences.
This public interest determination is repealed 5 years from the day on which it commences.
Terms defined in the Privacy Act have the same meanings in this determination.
(1) Noting that Privacy (International Money Transfers) Public Interest Determination 2020 (No. 1) applies to the disclosure of personal information to an overseas recipient where:
(a) Australia and New Zealand Banking Group Limited (ANZ), as an authorised deposit-taking institution within the meaning of the Banking Act 1959 (ADI), is processing an international money transfer (IMT) on behalf of one of its customers, and
(b) in order to process the IMT, ANZ discloses personal information of the individual who is the beneficiary of the IMT (beneficiary) to another financial institution that is not in Australia or an external Territory (overseas financial institution) for the purpose of:
(i) remitting the relevant funds to the beneficiary’s financial institution for payment, or
(ii) a communication that is necessary to confirm receipt of the funds or to facilitate processing or return of the funds by the beneficiary's financial institution.
(2) No other ADI is taken to breach section 15 of the Privacy Act while Privacy (International Money Transfers) Public Interest Determination 2020 (No. 1) is in force if:
(a) the ADI breaches Australian Privacy Principle (APP) 8.1 when engaging in the acts and practices described in Privacy (International Money Transfers by ANZ) Public Interest Determination 2014 (No. 1) and set out in subsection 6(1) above, or
(b) an overseas financial institution does an act, or engages in a practice, in relation to the personal information disclosed to it by the ADI in the course of the ADI engaging in the acts and practices described in Privacy (International Money Transfers) Public Interest Determination 2020 (No. 1) and set out in subsection 6(1) above, that would be a breach of an APP (other than APP 1) if the APPs applied to that act or practice.