Privacy policy subscription for Australian real estate: why "kept current" matters
A privacy policy isn't set-and-forget. The rules behind it keep moving: the Privacy Act 1988 (Cth), the Australian Privacy Principles, OAIC guidance, and the 2026 AML/CTF changes for property-sale work. A policy fine two years ago can quietly fall out of step, and a static template you bought once can't tell you. A maintained set of templates is built to close that gap.
By Jon Oates, Founder of Privaproof · Last updated · Start the free 2-min audit →
General information, not legal advice. Your obligations depend on your circumstances.
Not sure it's you?
Does this apply to you?
Tap what's true for your agency. Nothing is saved.
Orientation only, not a compliance assessment. General information and tools, not legal advice.
Why does a one-off privacy policy go stale?
Most agencies get their privacy documents once: a template downloaded years ago, a policy a previous principal wrote, or wording copied from another agency's website. The problem isn't the document on day one. It's day 400. In just the last couple of years the ground underneath these documents has shifted:
- 1 July 2026: AML/CTF Tranche 2. Agencies providing property-sale services are drawn into the AML/CTF regime for part of their work, and the personal information they handle for those obligations can fall under the Privacy Act, regardless of the small-business turnover threshold.
- June 2025: a direct right to sue. Individuals can now bring an action for a serious invasion of privacy, so the stakes of getting collection and handling wrong have risen.
- The OAIC's 2026 privacy sweep named real estate as a priority sector, with the regulator actively checking how agencies collect and handle personal information.
- APP guidance and expectations move too: what "reasonable steps" and a clear collection notice look like is not frozen in time.
None of that reaches into a PDF you saved in 2023. A static template can't know the law changed, and it won't prompt you to revisit it.
What should (and shouldn't) "kept current" mean?
Here's the honest boundary, because it matters. A subscription that keeps templates current means:
- We maintain the template library. As the law and OAIC guidance change, we update the underlying templates and make the current versions available to you, so you're never adopting wording that's already behind.
- You get the updated versions to adopt. When something material changes, you're told, and the refreshed template is in your account for you to review, tailor to your agency, and put in place.
What it does not mean, and no honest product should claim otherwise:
- It does not reach into your business and change your live documents for you. You choose what to adopt.
- It does not guarantee your agency is compliant. Compliance depends on how you tailor and apply the documents to your actual practices: that part is, and remains, yours.
- It is not legal advice, and it does not replace advice from your own lawyer for matters that genuinely need it.
In plain terms: we keep the templates current; you keep your agency current by adopting them. That division is the whole point: you get the heavy lifting of tracking the law done for you, without anyone pretending a template is a substitute for your own judgement or a solicitor's advice.
Why do real-estate-specific templates beat generic ones?
A free or cheap general privacy policy template is written for "any business." Real estate has its own collection points the generic ones miss: rental applications and 2Apply-style data, open-home registers, tenancy databases, landlord and vendor records, and the AML customer-ID information now in scope. A maintained, real-estate-specific set is written around those touchpoints, and updated when those rules change.
Common questions
Why does a privacy policy go out of date?
The rules behind it keep moving: the Privacy Act, the Australian Privacy Principles, OAIC guidance, and the 2026 AML/CTF changes. A static template you bought once can't know the law changed and won't prompt you to revisit it, so a policy that was fine two years ago can quietly fall out of step.
What does "kept current" actually mean?
The template library is maintained: as the law and OAIC guidance change, the underlying templates are updated and the current versions made available for you to review, tailor and adopt. It does not reach into your business and change your live documents for you, and it does not guarantee compliance.
Does a kept-current subscription make my agency compliant?
No. Compliance depends on how you tailor and apply the documents to your actual practices: that part remains yours. The subscription keeps the templates current; you keep your agency current by adopting them.
Why choose real-estate-specific templates over a generic one?
Real estate has collection points generic templates miss: rental applications and 2Apply-style data, open-home registers, tenancy databases, landlord and vendor records, and the AML customer-ID information now in scope. A maintained, real-estate-specific set is written around those touchpoints and updated when those rules change.
How does the Privaproof model work?
Privaproof is a maintained set of privacy templates for Australian real-estate agencies, all fourteen reviewed by Matthew Hodgkinson, an Australian practising solicitor (Papillon Lawyers), on a flat annual subscription. You get every document to tailor to your agency now, and (the part a one-off purchase can't give you) the current version whenever the rules change, at no extra cost. It's the "someone is watching the law so I don't have to" layer, kept deliberately inside honest limits: tools and general information you adopt, not legal advice, and not a law practice.
See where your agency stands: free 2-minute self-audit →
This is general information, not legal advice. Privaproof provides privacy tools and general information; it is not a law practice and does not provide legal advice. Sources: OAIC: guide to developing an APP privacy policy; OAIC: Australian Privacy Principles; Privacy Act 1988 (Cth).