Data Transfer Addendum Template for New Zealand

1. Special Categories of Data: Additional provisions for handling sensitive personal information, required when sensitive data is involved

2. Sub-processor Arrangements: Provisions governing the appointment and oversight of sub-processors, needed when sub-processors will be involved

3. Data Protection Impact Assessment: Requirements for conducting impact assessments, recommended for high-risk processing activities

4. Cross-Border Privacy Rules Compliance: Specific provisions for APEC CBPR compliance, relevant when transfers involve APEC member countries

5. Government Access Requests: Procedures for handling government access requests, important for transfers to countries with intrusive government surveillance

6. Insurance Requirements: Specific insurance obligations for data protection, recommended for high-value or high-risk transfers

1. Schedule 1: Description of Transfer: Detailed description of the data transfer including data categories, subjects, and processing purposes

2. Schedule 2: Technical and Organizational Security Measures: Specific security measures and controls to be implemented

3. Schedule 3: Authorized Sub-processors: List of approved sub-processors and their processing activities

4. Schedule 4: Transfer Impact Assessment: Assessment of risks and safeguards for the specific transfer context

5. Schedule 5: Standard Contractual Clauses: If applicable, incorporation of standard contractual clauses for international transfers

6. Appendix A: Contact Details: Contact information for privacy officers and key personnel responsible for data protection