Trade-ins, PPSR and privacy: handling vehicle and owner data at a dealership
A trade-in is not just a car changing hands, it is a small pile of personal information: the customer's own details for the deal, the vehicle's identifiers, a Personal Property Securities Register (PPSR) search, and often a previous owner's information sitting in the service books, registration papers or finance history. All of that is personal information under the Privacy Act. Collect only what the trade needs, use it for the trade, keep it secure, and do not hold it longer than you must.
By Jon Oates, Founder of Privaproof · Last updated
General information, not legal advice. Privaproof is not a law practice.
What a trade-in actually brings you
- The customer's own details, as part of the sale and any finance payout.
- The vehicle's identifiers (VIN, registration), which you use to value it and check its status.
- A PPSR search, which you run to check for money owing or other interests over the vehicle. The search is a normal, lawful step; the privacy point is handling the search and its results as part of the customer's file.
- A previous owner's information, which frequently travels with a used car in the service history, logbooks, registration papers, or old finance documents. That is someone else's personal information, and it deserves the same care.
The privacy rules that apply
- Collect only what is reasonably necessary (APP 3). You need enough to value the car, check the PPSR and complete the payout, not a customer's entire history.
- Notice (APP 5). Your collection notice should cover the trade-in as one of your collection points, including that you run a PPSR check and may disclose details to wholesalers or auctions if you on-sell. Read: the collection notice a dealership needs
- Use and disclosure (APP 6). Use the trade-in data for the trade, and disclose it only for related purposes, for example a PPSR search, a finance payout to the customer's lender, or on-selling the vehicle through a wholesaler or auction.
- Security and retention (APP 11). Keep it secure and destroy or de-identify what you no longer need. Old finance documents and a previous owner's papers left in a glovebox or a filing cabinet are a quiet over-retention problem. Read: how long should a car dealer keep customer records?
The previous-owner data nobody thinks about
The service history and papers that come with a used trade-in often name a previous owner and their servicing, finance or registration details. You did not collect it from them, but you now hold it, so treat it as personal information: do not use it for anything beyond the vehicle's sale, do not pass it on unnecessarily, and clear or redact it before the car moves on where you reasonably can.
This is general information and document templates you tailor to your own business, not legal advice.
Common questions
Is running a PPSR check a privacy problem?
No, the PPSR search itself is a normal and lawful part of buying a trade-in. The privacy side is simply handling the customer's details and the search results as part of their file: collect what you need, keep it secure, and do not misuse it.
What do we do with the previous owner's details in the logbooks?
Treat them as personal information you now hold. Use them only in connection with the vehicle, do not pass them around, and clear or redact previous-owner details before the car is on-sold where you reasonably can.
How long should we keep trade-in paperwork?
Keep it as long as you genuinely need it for the transaction and any records you are required to keep, then destroy or de-identify it. Leaving old trade-in files and a previous owner's papers indefinitely is over-retention.
This is general information and document templates you tailor to your own business, not legal advice. Privaproof is not a law practice and does not provide legal advice. The PPSR is administered separately, and this page covers only the privacy handling of the data involved. Privaproof's car-dealer documents are self-authored and are not independently reviewed by a solicitor. For advice on your specific circumstances, consult a qualified Australian legal practitioner.