Any agreement between two countries with respect to matters of information about citizens would need to respect the laws of the jurisdiction within which the information originated. So the short answer to your question is yes.
As discussions about the border proceed, we have been very careful to engage the office of the Privacy Commissioner, to seek guidance from that office to make sure that the best practices are followed. We will continue to seek that advice, and of course, after the fact we're obliged to produce a privacy impact statement, so we will make sure that is done—