[1] Australian government agencies and heads of department will have the power to determine whether personal information will be held or outsourced offshore.
[2] In the new policy, it is now at the discretion of the agency head as to the type of information held in a cloud arrangement.
[3] However, caution has been taken regarding security information, in that they have to conform to the Protective Security Policy Framework and Information Security Manual.