Purpose

The purpose of this paper is to examine the requirements of the General Data Protection Regulation (“GDPR”) in order to: identify its requirements for the Australian and New Zealand based members of multi-national property firms (“MNPF”); and understand how those firms are currently engaging with customers regarding the obligations the GDPR imposes.

Design/methodology/approach

The research was undertaken by means of doctrinal legal research that engaged with statutory law, related policy documents, accessible private firm documents and website materials, and academic and other related writings. The authors considered these in the context of the GDPR's requirements, and how relevant obligations were communicated to the public on the MNPF Australian and New Zealand members' websites.

Findings

The research confirms the available literature's observations of the GDPR's broad reach and the firms to which it applies. The difficulties experienced in locating relevant information highlights the need for a change to firm processes to ensure that any communication obligations are met. The cases engaged with also serve to highlight the need to ensure that the actual practice is consistent with required GDPR processes.

Research limitations/implications

The research faced three limitations. First: there was a limited number of relevant Australian and New Zealand based property related firms available to consider: not all property related firms were members of a MNPF or had business partners or customers/clients in the European Union or European Economic Area. Second: one of the relevant firms had already identified it was withdrawing from the Australian market. Third: there was a lack of public access to all materials as, while privacy policies as required by domestic laws were readily accessible, access was not readily available to GDPR related or required information or documents.

Originality/value

The research adds to the academic literature in this emerging area of international legal obligation.

中文翻译：

---

数据共享，国际财产惯例和GDPR：与您的消费者沟通

目的

本文的目的是研究《通用数据保护条例》（“ GDPR”）的要求，以便：确定其对总部位于澳大利亚和新西兰的跨国房地产公司（“ MNPF”）成员的要求；并了解这些公司目前如何就GDPR规定的义务与客户进行互动。

设计/方法/方法

这项研究是通过涉及成文法的学籍法律研究，相关政策文件，可访问的私人公司文件和网站材料以及学术著作和其他相关著作来进行的。作者根据GDPR的要求，以及如何在MNPF澳大利亚和新西兰成员的网站上向公众传达相关义务来考虑这些问题。

发现

该研究证实了现有文献对GDPR的广泛影响及其适用的公司的观察。查找相关信息时遇到的困难凸显出需要改变公司流程以确保履行任何沟通义务的必要性。涉及的案例还强调需要确保实际做法与要求的GDPR程序保持一致。

研究局限/意义

该研究面临三个局限性。第一：可供参考的澳大利亚和新西兰的房地产相关公司数量有限：并非所有房地产相关公司都是MNPF的成员，也不是欧盟或欧洲经济区的业务合作伙伴或客户/客户。第二：相关公司之一已经确定它正在退出澳大利亚市场。第三：缺乏公开获取所有资料的途径，因为虽然可以轻松获得国内法律要求的隐私政策，但无法轻松获得GDPR相关或所需的信息或文件。

创意/价值

该研究增加了这一新兴的国际法律义务领域的学术文献。