[LINK] .nsw.gov.au and privacy

[David]

Recently I changed my email address on the Service NSW website, and almost immediately received three emails from <qa_support at salesforce.com> advising me they "recently received a request to change your Salesforce account’s email address [...]  To finish changing your email address, go to [...] https://servicensw.my.salesforce.com/setup/emailverif?oid=[long user ID]"

I have no desire for an account with Salesforce.com, which is a "customer relations manager" and marketing company apparently based in San Franscisco.

The person from Service NSW advised  "While there does appear to be an excess of emails confirming your change it is just the salesforce platform that the website operates on that is generating these automated responses as a result of your email address update."

The Service NSW privacy policy doesn't mention Salesforce.com, but it does mention a company by the name of Mixpanel Inc. and Google Analytics.

Enquiries as to how much personal information is sent to third parties or offshore elicit the usual incantations about privacy, but the privacy policy is full of the usual escape clauses such as "Service NSW will take reasonable security measures [...]."

So much for privacy, it's pretty clear all residents personal information id held offshore.  Why does Gladys Berejiklian need to involve companies like Google Analytics, Salesforce.com, _and_ Mixpanel?  Why is there no mandatory requirement for all personal information to be held solely in Australia and under the direct control of Government?

David L.