What's inside
A set built for what agencies actually collect at open homes, on rental applications, and through tenancy databases, including the privacy policy and open-home collection the OAIC's 2026 sweep examined. Plain-English guidance is built into every template, so you tailor each one step by step with no drafting from a blank page.
REVIEWED
REVIEWED
REVIEWED
REVIEWED
REVIEWED
REVIEWED
REVIEWED
REVIEWED
REVIEWED
REVIEWED
REVIEWED
REVIEWED
REVIEWED
REVIEWED
Those documents line up with the eight areas the free audit scores, and with the Australian Privacy Principles behind them. Here is the coverage:
Your kit covers all 8 areas the audit checks
What it costs
The OAIC is actively reviewing real-estate agencies, and getting your documents in order now costs far less than scrambling after an inquiry. Bespoke drafting is accurate the day it's signed, then falls behind as the rules move. Each document is reviewed by a solicitor before it joins the Kit, and you get updated templates as the law changes.
- All fourteen documents lawyer-reviewed
- Covers open homes, rental applications and tenancy databases, including the privacy policy and open-home collection the OAIC's 2026 sweep examined
- Kept current as the law changes, with new versions when it moves
- Tailor them to your agency step by step, with plain-English guidance built into every template
Next: your details, then payment. 30-day money-back guarantee.
General information and compliance tools, not legal advice.
Free template vs lawyer-reviewed and kept current
The free OAIC privacy-policy template is a genuine, no-cost starting point for the general Australian Privacy Principles. Two things it can't do: it isn't written for real estate (no open-home sign-in sheets, tenancy databases, or copies of tenant ID), and it won't update when the law moves. Here is how the two compare:
See the legal quality for yourself
Here is a real extract from one of the solicitor-reviewed documents, with the Papillon Lawyers review credit shown. It is a partial extract to demonstrate the depth of the legal work, not usable compliance wording.
▸ Privaproof template · Data breach response plan
Data Breach Response Plan Template for Australian real-estate agencies
Section 5: The response steps · Step 2: Assess (the 30-day assessment window)
Embedded legal guidance
In Australian Information Commissioner v Australian Clinical Labs Ltd (No 2) [2025] FCA 1224, the Federal Court found that it was unreasonable for ACLL to rely on a third-party conclusion that no eligible data breach had occurred, when ACLL knew that provider had conducted a limited assessment of the potential breach. It is therefore important to ensure that the investigation is thorough and the evaluation fully informed. The 30 days is also a maximum, not a target: the OAIC expects you to assess as fast as you reasonably can, because the risk of serious harm grows with time. Start notifying as soon as you're satisfied a breach is eligible, even if that's on day 3.
Partial extract from a Privaproof v1.0 solicitor-reviewed document (source intact). Shown to demonstrate the quality of the legal work; not usable as compliance wording. Papillon review credit highlighted.
Get the Kit · A$539/year → Next: your details, then payment. 30-day money-back guarantee.
Kept current as the law changes
Privacy law keeps moving: the OAIC's 2026 sweep, the RentTech determination, changing penalties, and reforms to come. A one-off template fits the day you buy it, then quietly falls out of date. Your subscription keeps your documents current, so you're not silently behind a year later. The automated-decision rule starting 10 December 2026 is already drafted into your documents, ahead of the deadline.
Kept current · Kit v1.0 · updated
Common questions
What privacy documents does a real-estate agency actually need? More than most agencies realise. Every enquiry, open home, rental application and tenancy-database check collects personal information, so you need an APP 1 privacy policy, APP 5 collection notices for each of those touchpoints, a data-breach response plan, and retention, access and complaint procedures. The Kit is the complete set: 14 real-estate-specific documents, all fourteen solicitor-reviewed and kept current, so you're not stitching compliance together yourself.
Is the free OAIC template enough? Rarely. A free generic template covers the APPs in the abstract, but it wasn't written for how agencies actually collect data (open homes, rental applications, tenancy databases, VOI checks), and it goes stale the moment the law moves. That gap is exactly what the OAIC's 2026 sweep examined. The Kit is written for agencies, all fourteen documents solicitor-reviewed, and updated for you as the rules change, not a document that was generic on day one and out of date by year two.
Do I need a lawyer as well? For your everyday privacy documents, the Kit is built to be your answer: solicitor-reviewed wording written for agencies, without the cost of commissioning a lawyer to draft from scratch. It's the smart middle ground between a risky free download and a bespoke legal bill: real depth and currency, done for you. It's general information and tools, not legal advice, so how you complete and use the documents still matters, and a live dispute, data breach or unusual set-up is worth your own advice, but for the standard set every agency needs, this is what it's for.
How much work is it to tailor them? Closer to an afternoon than a fortnight, because it isn’t spread evenly. Ten fields repeat across the whole kit (agency legal name, trading name, ABN, privacy officer, email, phone, date), so you fill those in once and replace them everywhere. Four documents need real thought, because they carry your agency’s name and go to the public: the privacy policy, the collection notice, the tenancy-database notice and the data inventory map. Seven need your details and a read, because they’re the procedures you reach for when something happens, so you adopt them rather than write them. Two you can use as they are. Each template has plain-English guidance built in, so you’re describing how your agency actually operates rather than drafting from a blank page, and it’s the same information a solicitor would ask you for. The Kit opens with a Start Here sheet that tells you which document is which and the order to work in.
Can I cancel? Yes, from your account at any time. Your documents stay yours; the updates stop at the end of the period you’ve paid for. There’s also a 30-day money-back guarantee.
General information and compliance tools, not legal advice. Privaproof is not a law practice. All fourteen documents are reviewed by Matthew Hodgkinson, an Australian practising solicitor (Papillon Lawyers).