Build a cross-border transfer table under APP 8
Key facts
- Human involvement
- YellowClose supervision
- How AI is used
- List destinations, recipients and APP 8 pathways (APP 8.1 reasonable steps or an APP 8.2 exception) from the DPA and architecture, and draft binding-scheme clauses.
- What the lawyer must review
- Do not rely on an adequacy list; Australia has none
- Confirm APP 8.2(a) is met by a binding scheme or contract
- Remember the discloser stays accountable for the recipient under APP 8.1
- Flag offshore AI and cloud use
- Check the My Health Records Act 2012, state health laws and current OAIC guidance
- Written for / version
- Commonwealth versionCthNZ
Rules that apply
The document starts from the task name. Change it if this piece of work is different.
Who does what
| Role | What they do |
|---|---|
| Assistance | Potential support includes preparing preliminary structure or wording. Confirm the tool’s capability and permitted scope. |
| Lawyer | Set the scope, supervise the work closely, verify every part relied on, resolve omissions and exceptions, and approve the exact output. |
Checklist
- Review operative clauses in the complete document, including definitions, cross-references, schedules and inconsistencies with the instructions.
- Verify the applicable jurisdiction and the version of each relevant law, rule or instrument in force at the material time.
- Confirm the output against the client’s instructions and the complete relevant source material, including omissions or contradictions.
- Resolve exceptions and record the responsible lawyer’s approval of the exact output and intended use.