On 1 December 2020, the Privacy Act 2020 (Act No. 31), including cross-border data transfer regulation, entered into force. Agencies can transfer personal information overseas if the recipient is subject to privacy laws or contractual obligations pr…