Skip to content
Choose your industry

Privacy compliance, tailored by industry: kept current as the law changes.

Privaproof builds industry-specific privacy-compliance kits for Australian businesses, one shaped to each profession's real data and obligations, not a blanket template you buy once and forget. Pick your industry below.

Choose your industry

General information, document templates and tools you tailor, not legal advice. Privaproof is not a law practice.

A privacy-compliance professional in an Australian office

Choose your industry

One kit, shaped to your profession

All seven are on sale now, each written for its own industry rather than adapted from a generic template.

★ Real estate agencies

The flagship kit. A complete real-estate privacy kit: privacy policy, APP 5 collection notices, data-breach response plan and the supporting documents, kept current as the law changes. Plus 30+ free plain-English guides.

Kit availableOpen the real-estate kit →

Conveyancers & WA settlement agents

AML Tranche 2 switches the Privacy Act on for the ID data you collect for customer checks, even under A$3 million. This is the privacy half your AML kit leaves out.

Kit availableOpen the Conveyancer Kit →

Accountants & bookkeepers

Hold an individual's tax file number and the tax file number rule binds you, even under A$3 million. It sits under the Privacy Act but outside the thirteen Australian Privacy Principles, and the small-business exemption does not switch it off.

Kit availableOpen the Accountant Kit →

Buyers agents

Your AML checks handle the IDs. They do not cover your Privacy Act obligations for the identity, source-of-funds and beneficial-ownership data you hold.

Kit availableOpen the Buyers-Agent Kit →

Strata & owners-corporation managers

You hold a whole community's data, from the owners roll to CCTV footage, whether or not the Privacy Act binds you. State strata law and surveillance law apply either way.

Kit availableOpen the Strata Kit →

Recruitment & staffing agencies

Your applicant-tracking system scores and ranks candidates, so from 10 December 2026 you must disclose that automated decision-making. And job applicants aren't covered by the employee-records exemption, so the candidate data you hold sits under the Privacy Act.

Kit availableOpen the Recruitment Kit →

Car & motor dealers

You take a driver's licence for every test drive and broker finance for buyers, so you hold a concentrated pool of identity and finance data. Coverage turns on your turnover, but state surveillance law governs your yard cameras either way.

Kit availableOpen the Car-Dealer Kit →

Does the Privacy Act even apply to my industry?

Often yes, even under the A$3 million small-business threshold, because several separate triggers switch it on regardless of turnover:

  • You provide an AML/CTF designated service. From 31 March 2026, real-estate agencies, conveyancers, buyers agents and parts of the accounting profession become AUSTRAC reporting entities, and the Privacy Act then applies to the identity and customer-due-diligence data you collect, regardless of turnover.
  • You handle tax file numbers. A separate rule binds any practice that holds TFN information, even a small one outside the Australian Privacy Principles.
  • You handle health information, or you trade in personal information. Either can make you a covered entity on its own.

So the honest first step is not to assume you are exempt. Open your industry above: each set of guides sets out which of these triggers reach your profession, and what to do about the ones that do.

Why a kit built for your industry beats a blanket template

A generic privacy-policy generator gives every business the same document. But your risk lives in the specifics: the rental application and tenancy-database notice for an agency, the owners roll and CCTV footage for a strata manager, the source-of-funds file for a buyers agent, the client TFN for an accountant. A blanket template covers none of them properly.

Privaproof's kits are the same shape across industries, a privacy policy, the right collection notices, a data-breach response plan, a retention schedule, but the substance is written for how your profession actually collects and holds data. That is the difference between a document you file and forget and one that would actually stand up.

And because privacy law keeps moving (AML Tranche 2 from 1 July 2026, the automated-decision-making disclosure rule from 10 December 2026, and more to come), every kit is kept current as the law changes. You get new versions when the law moves, with no recurring lawyer's bill and no lock-in.

Every Privaproof kit is a maintained, sector-specific product at a self-serve price: not a generic template you buy once and forget, and not a recurring lawyer's bill. You get plain-English documents you tailor to your business, and new versions when the law moves.

These are compliance tools and templates you tailor to your own business. They are general information, not legal advice. For advice on your specific circumstances, consult a qualified Australian legal practitioner.

Start where you are

General information and compliance tools, not legal advice. Privaproof is not a law practice and does not provide legal advice. Whether the Privacy Act 1988 (Cth) applies to your business depends on your turnover, structure and the services you provide. The law changes over time, so check you are working from a current version.