---
title: "Check overseas disclosure against IPP 12 before a tool processes client data"
url: "https://ailawframework.com/practice/privacy-data-protection-and-cyber/build-a-cross-border-transfer-mechanism-table/new-zealand"
type: "task_jurisdiction_version"
site: "AI Law Framework"
id: "A25-T1-R10-NZ"
practice_area: "Privacy, Data Protection & Cyber"
tier: "yellow"
lawyer_review: "required"
jurisdictions: ["NZ"]
last_reviewed: "2026-09-23"
---

# Check overseas disclosure against IPP 12 before a tool processes client data

> Extract the vendor's stated storage locations and subprocessors from the contract.

Canonical page: https://ailawframework.com/practice/privacy-data-protection-and-cyber/build-a-cross-border-transfer-mechanism-table/new-zealand  
Last reviewed: 2026-09-23

Site index for agents: https://ailawframework.com/llms.txt

## Key facts

| Fact | Value |
| --- | --- |
| Practice area | [Privacy, Data Protection & Cyber](https://ailawframework.com/practice/privacy-data-protection-and-cyber.md) |
| Human involvement | Yellow: Lawyer and AI draft together |
| How AI is used | Extract the vendor's stated storage locations and subprocessors from the contract. |
| What the lawyer must review | Check IPP 12 for any disclosure outside New Zealand, including AI prompts Do not apply APP 8 or an EU adequacy finding as the test Keep personal data out if the destination is unclear |
| Written for | New Zealand |
| Applies to | [Build a cross-border transfer mechanism table](https://ailawframework.com/practice/privacy-data-protection-and-cyber/build-a-cross-border-transfer-mechanism-table.md) |

## Checking plan

- What the AI does: Extract the vendor's stated storage locations and subprocessors from the contract.
- Basis: Checked against the linked sources on 23 September 2026. Confirm the current instrument before reliance.

## Notes

- If you cannot confirm the destination, keep personal information out of the tool.

## Sources

- [OPC: information privacy principles](https://www.privacy.org.nz/privacy-principles/) (checked 2026-09-23)
- [OPC: AI and the IPPs](https://www.privacy.org.nz/resources-and-learning/a-z-topics/ai/) (checked 2026-09-23)
- [NZLS: Generative AI guidance for lawyers (March 2024)](https://www.lawsociety.org.nz/professional-practice/rules-and-maintaining-professional-standards/generative-ai-guidance-for-lawyers/) (checked 2026-09-23)

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*