Section 16CPrivacy Act 1988 (Cth)

Acts and practices of overseas recipients of personal information

(1) This section applies if:

(a) an APP entity discloses personal information about an individual to an overseas recipient; and

(b) Australian Privacy Principle 8.1 applies to the disclosure of the information; and

(c) the Australian Privacy Principles do not apply, under this Act, to an act done, or a practice engaged in, by the overseas recipient in relation to the information; and

(d) the overseas recipient does an act, or engages in a practice, in relation to the information that would be a breach of the Australian Privacy Principles (other than Australian Privacy Principle 1) if those Australian Privacy Principles so applied to that act or practice.

(2) The act done, or the practice engaged in, by the overseas recipient is taken, for the purposes of this Act:

(a) to have been done, or engaged in, by the APP entity; and

(b) to be a breach of those Australian Privacy Principles by the APP entity.

Sourced from the Federal Register of Legislation at 17 May 2026. For the latest information on Australian Government law please go to https://www.legislation.gov.au. Verify the current text against the official source before relying on it.

Related sections

Research how courts apply s 16C

BriefBridge searches Australian caselaw by meaning — every answer cited to the paragraph.

Try BriefBridge free