Why Privacy Laws Matter

Privacy laws may not be the most exciting topic, but they are essential for property managers and real estate professionals. Recent reforms in Australia have introduced stricter regulations and significant penalties, with fines reaching up to $66,000 for minor breaches and millions for serious violations. Many agencies may not even realise they are at risk until it’s too late, with common issues including improper storage of tenant data, offshore data transfers, and the use of AI in decision-making without proper disclosure.

Key Changes in Privacy Laws

• New Powers for the Privacy Commissioner
  The privacy commissioner now has the authority to issue infringement notices (similar to speeding fines) for non-compliance. This means agencies can face penalties immediately if their privacy policies aren’t up to standard.

• Collection Notices
  Agencies must provide clear collection notices whenever personal data is gathered, such as at open homes. Additionally, a data breach response plan is now essential.

• Offshoring Data and Compliance
  Many agencies use virtual assistants or software that stores data on offshore servers. If so, agencies must disclose where data is sent and ensure service providers comply with Australian privacy laws.

• AI and Decision-Making
  Any use of AI to assess tenant applications or make decisions that impact individuals must be disclosed in privacy policies.

Best Practices for Compliance

1. Update Privacy Policies – Ensure policies reflect the latest legal requirements, including AI usage and offshore data storage.
2. Implement Collection Notices – Display notices at open homes and clearly communicate how data is used.
3. Develop a Data Breach Response Plan – Have a clear strategy for handling data breaches and notifying affected individuals.
4. Review Contracts with Service Providers – Ensure third-party service providers comply with Australian privacy laws.
5. Educate Staff – Regularly train employees on data protection responsibilities.

Data Breaches and Legal Risks

A “tort” is a civil wrong, such as negligence. Individuals affected by data breaches can now sue property managers directly without needing to go through the privacy commissioner.

Common Data Breach Scenarios:

• Financial Information Leaks – Exposure of bank details leading to identity theft or financial loss.
• Medical Information Exposure – Leaks that could result in job loss or discrimination.
• Identity Theft Risks – Mishandling of personal data in tenancy applications.

To reduce risks, agencies should only collect essential data and follow the privacy commissioner’s guidelines.

Handling Tenancy Applications

Laws around retaining tenancy application data are evolving. Some states propose requiring agencies to delete unsuccessful applications within as little as three business days. For successful applicants, data retention typically ranges from three to five years after tenancy ends.

Supporting Business Owners

To help property managers navigate these new laws, legal services are available to:

• Conduct Privacy Health Checks to audit current data practices.
• Provide DIY privacy compliance templates including collection notices and privacy policies.
• Offer free resources like privacy guides and training materials.

Staying compliant with privacy laws is essential to avoid hefty fines and maintain trust with clients. By updating privacy policies, educating staff, and being proactive about data protection, property managers can navigate these changes smoothly.

For more insights, be sure to check out the full podcast episode!