cloud-based HR software Australia

Cloud-based HR software Australia organisations use is frequently hosted overseas, and that is permitted rather than prohibited. What it changes is the obligation that stays with you.

Where personal information is disclosed to an overseas recipient, Australian privacy law generally requires reasonable steps to ensure that recipient handles it consistently with the Australian Privacy Principles, and in many circumstances you remain accountable for what happens to it.

Which makes three things worth doing before you sign anything. Ask which countries the data touches, including backups and support access. Read what the contract actually says about handling and about breach notification. And record the assessment you made, because that record is the evidence that you took reasonable steps.

The Office of the Australian Information Commissioner publishes the cross-border disclosure principle and guidance on it. This is general information rather than legal advice, and obligations vary by state and territory.

See Sentrient’s privacy training course and HR software.