Kept current: the Privaproof privacy Kit update log
Australian privacy law does not stand still, so your documents should not either. This is our public log of what is in the current version of the Kit and what we change as the law moves. When a change affects your documents, we update them, the new version appears in your Kit, and it is recorded here with a date. A one-off template cannot do this.
By Jon Oates, Founder of Privaproof · Last updated · Start the free 2-min audit →
General information, not legal advice. Your obligations depend on your circumstances.
Not sure it's you?
Does this apply to you?
Tap what's true for your agency. Nothing is saved.
Orientation only, not a compliance assessment. General information and tools, not legal advice.
What does "kept current" actually mean?
It is a specific promise, not a slogan:
1. We watch the law (the Privacy Act, OAIC guidance, and the AML/CTF changes that pull ID data into the Privacy Act). 2. When something affects your documents, we update them and the new version appears in your Kit, at no extra cost. 3. We log it here, dated, so you can see the Kit is current and see exactly what changed and when.
That is the difference between a subscription and a template you buy once: a one-off file is right on the day you buy it and slowly wrong after, because the law keeps moving and the file on your hard drive does not.
What is the current Kit version?
- Kit version: v1.0, with the privacy policy and the data-breach response plan at v1.1 (see the log below for what changed and why)
- All fourteen documents reviewed by Matthew Hodgkinson, an Australian practising solicitor (Papillon Lawyers), review date 29 July 2026. The three core documents were reviewed 14 July 2026; the remaining eleven followed.
- A Start Here cover sheet comes with the Kit. It is the guide to the fourteen, not a fifteenth document.
- Written for: Australian real-estate agencies, under the Privacy Act 1988 (Cth) and the Australian Privacy Principles
Update log
Newest first.
4 August 2026: two documents updated, and every document released
Privacy Policy v1.0 to v1.1. The section on tax file numbers now also covers credit-reporting data, and says plainly that holding either does not by itself make an agency an APP entity, while it can still create obligations worth checking. Added on the solicitor's direction.
Data-Breach Response Plan v1.0 to v1.1. Added a note that a breach of tax file numbers or credit-reporting information may trigger obligations beyond the ordinary ones, and that this is a point to take to a solicitor.
Two more documents changed without a version bump because they had not been released before, so their first public version is v1.0: the Consent form now records that the consent standard is subject to the limited emergency exceptions, and the Retention & destruction schedule now states that its periods are indicative only. Retention periods sit outside a privacy review, being tax and State law, and the schedule says where to confirm them.
And the remaining eleven documents were released, so every one of the fourteen is now downloadable and every one has been through a solicitor's hands rather than the three core ones alone. Same price, same update promise.
29 July 2026: the whole Kit reviewed by a solicitor
The remaining eleven documents were reviewed by Matthew Hodgkinson, an Australian practising solicitor (Papillon Lawyers). Nothing else about the Kit changed.
July 2026: v1.0 released
The three core documents (privacy policy, collection notice, data-breach response plan) were reviewed by Matthew Hodgkinson, an Australian practising solicitor (Papillon Lawyers) and released, alongside the supporting governance documents that make up the whole-agency system.
14 July 2026: future-proofed for the 10 December 2026 automated-decision rule
The reviewed privacy policy already includes an automated decision-making section (APP 1.7), drafted ahead of its 10 December 2026 commencement, so members are not scrambling to add it later. See the automated-decision explainer.
Tracking now (updates will be logged here as they land)
- 29 July 2026: the AUSTRAC enrolment window for real-estate reporting entities.
- 10 December 2026: the APP 1.7 automated decision-making transparency rule takes effect.
- Ongoing OAIC guidance on the 2026 privacy focus and the Notifiable Data Breaches scheme.
For the full picture of the dated changes we track, see the 2025–2026 privacy and AML compliance calendar.
Why does a living log matter?
Privacy compliance is a moving target. The value of a maintained Kit is not just the documents you get today; it is that they keep pace without you having to read the amendments yourself. This log is the proof: a dated, public record that the Kit is current, which a static template or a one-off legal pack cannot show.
Common questions
Is the Privaproof Kit current?
Yes. The current version is v1.0, with all fourteen documents solicitor-reviewed, and this log records changes as they are made. The privacy policy is already drafted for the 10 December 2026 automated-decision rule, ahead of its start date.
How often is it updated?
When the law changes in a way that affects your documents, not on a fixed schedule. Privacy law moves in steps, not continuously, so updates are tied to real events (like the 10 December 2026 rule) and logged here with a date.
What happens to my documents when the law changes?
We update the affected document and the new version appears in your Kit at no extra cost. You use the latest version; there is nothing new to buy and nothing to chase down.
Does a free template or one-off pack stay current?
No. It is correct on the day you download it and drifts out of date as the law moves. Keeping documents current is the specific thing a maintained subscription does and a one-off cannot.
This is general information, not legal advice. Privaproof provides privacy tools and general information; it is not a law practice and does not provide legal advice. Sources: OAIC: Australian Privacy Principles; OAIC: Notifiable Data Breaches scheme.