Privacy (International Money Transfers) Public Interest Determination 2025 (No. 2) (Cth)

Privacy (International Money Transfers) Public Interest Determination 2025 (No. 2)

I, Carly Kind, Privacy Commissioner, make this determination under subsection 72(4) of the Privacy Act 1988 (Privacy Act). Dated: 11 February 2025

[Signed] Carly Kind Privacy Commissioner

1 Name of public interest determination This is the Privacy (International Money Transfers) Public Interest Determination 2025 (No. 2).

2 Commencement This public interest determination commences on the day of its registration on the Federal Register of Legislation maintained under section 15A of the Legislation Act 2003.

3 Authority This determination is made by the Privacy Commissioner under subsection 72(2) of the Privacy Act.

4 Repeal The Privacy (International Money Transfers) Public Interest Determination 2020 (No. 2) (FRLI - F2020L00133) is repealed immediately before this public interest determination commences. This public interest determination is repealed 10 years from the day on which it commences.

5 Definitions Terms defined in the Privacy Act have the same meanings in this public interest determination.

6 Application for a public interest determination 1. The Reserve Bank of Australia (RBA) is an Australian Privacy Principle (APP) entity under subsection 6(1) of the Privacy Act because it is an agency under subsection 6(1) of the Privacy Act, and an organisation under section 7A(3) of the Privacy Act for particular acts and practices. 2. The RBA has applied under section 73 of the Privacy Act for a public interest determination in relation to the acts and practices set out in section 7 below.

7 International money transfer processing 1. The disclosure of the personal information about an individual to an overseas recipient by the RBA breaches or may breach APP 8.1 where: 1. the RBA, as authorised to carry out banking business under the Banking Act 1959 and the Reserve Bank Act 1959, is processing an international money transfer (IMT) on behalf of one of its customers, and 2. in order to process the IMT, the RBA discloses personal information of the individual who is the beneficiary of the IMT (beneficiary) to another financial institution that is not in Australia or an external Territory (overseas financial institution) for the purpose of: 1. remitting the relevant funds to the beneficiary's financial institution for payment, or 2. a communication that is necessary to confirm receipt of the funds or to facilitate processing or return of the funds by the beneficiary's financial institution, and 3. the RBA does not have a contractual relationship with the overseas financial institution that obliges the overseas financial institution to comply with the APPs other than APP 1. 2. The acts and practices set out in subsection (1) above may also lead to the RBA breaching other APPs (other than APP 1) by reason of the application of subsection 16C(2) of the Privacy Act if the overseas financial institution does an act, or engages in a practice, in relation to the information that would be a breach of an APP (other than APP 1) if the APPs applied to that act or practice.