Privacy compliance, tailored by industry: kept current as the law changes.
Privaproof builds industry-specific privacy-compliance kits for Australian businesses, one shaped to each profession's real data and obligations, not a blanket template you buy once and forget. Pick your industry below, or take the free 2-minute self-audit and fix exactly what it finds.
General information, document templates and tools you tailor, not legal advice. Privaproof is not a law practice.
Choose your industry
One kit, shaped to your profession
Real estate is the flagship and the only kit you can buy today. The others have free guides now, with their kits on the way.
★ Real estate agencies
The flagship kit, and the only one you can buy today. A complete real-estate privacy kit: privacy policy, APP 5 collection notices, data-breach response plan and the supporting documents, kept current as the law changes. Plus 30+ free plain-English guides.
Conveyancers & WA settlement agents
From 1 July 2026, AML Tranche 2 switches the Privacy Act on for the ID data you collect for customer checks, even under A$3 million. This is the privacy half your AML kit leaves out.
Free guides · kit comingConveyancer privacy guides →Accountants & bookkeepers
Handle a client's tax file number and you are inside the Privacy Act, even under A$3 million, through a separate limb the small-business exemption does not switch off.
Free guides · kit comingAccountant privacy guides →Buyers agents
Your AML checks handle the IDs. They do not cover your Privacy Act obligations for the identity, source-of-funds and beneficial-ownership data you hold.
Free guides · kit comingBuyers-agent privacy guides →Strata & owners-corporation managers
You hold a whole community's data, from the owners roll to CCTV footage, whether or not the Privacy Act binds you. State strata law and surveillance law apply either way.
Free guides · kit comingStrata privacy guides →Recruitment & staffing agencies
Your applicant-tracking system scores and ranks candidates, so from 10 December 2026 you must disclose that automated decision-making. And job applicants aren't covered by the employee-records exemption, so the candidate data you hold sits under the Privacy Act.
Free guides · kit comingRecruitment privacy guides →Car & motor dealers
You take a driver's licence for every test drive and broker finance for buyers, so you hold a concentrated pool of identity and finance data. Coverage turns on your turnover, but state surveillance law governs your yard cameras either way.
Free guides · kit comingCar-dealer privacy guides →Does the Privacy Act even apply to my industry?
Often yes, even under the A$3 million small-business threshold, because several separate triggers switch it on regardless of turnover:
- You provide an AML/CTF designated service. From 1 July 2026, real-estate agencies, conveyancers, buyers agents and parts of the accounting profession become AUSTRAC reporting entities, and the Privacy Act then applies to the identity and customer-due-diligence data you collect, regardless of turnover.
- You handle tax file numbers. A separate rule binds any practice that holds TFN information, even a small one outside the Australian Privacy Principles.
- You handle health information, or you trade in personal information. Either can make you a covered entity on its own.
So the honest first step is not to assume you are exempt. Take the free 2-minute self-audit and it tells you which of these reach you, then fix exactly what it finds.
Why a kit built for your industry beats a blanket template
A generic privacy-policy generator gives every business the same document. But your risk lives in the specifics: the rental application and tenancy-database notice for an agency, the owners roll and CCTV footage for a strata manager, the source-of-funds file for a buyers agent, the client TFN for an accountant. A blanket template covers none of them properly.
Privaproof's kits are the same shape across industries, a privacy policy, the right collection notices, a data-breach response plan, a retention schedule, but the substance is written for how your profession actually collects and holds data. That is the difference between a document you file and forget and one that would actually stand up.
And because privacy law keeps moving (AML Tranche 2 from 1 July 2026, the automated-decision-making disclosure rule from 10 December 2026, and more to come), every kit is kept current as the law changes. You get new versions when the law moves, with no recurring lawyer's bill and no lock-in.
A maintained product, not a stale template or a one-off legal bill
Every Privaproof kit is a maintained, sector-specific product at a self-serve price: not a generic template you buy once and forget, and not a recurring lawyer's bill. You get plain-English documents you tailor to your business, and new versions when the law moves.
These are compliance tools and templates you tailor to your own business. They are general information, not legal advice. For advice on your specific circumstances, consult a qualified Australian legal practitioner.
Start where you are
- Not sure if you are even covered? Take the free 2-minute self-audit. No cost, no obligation.
- Real-estate agency? The kit is ready.
- Any other industry? Open your guides above and join the founding list to be first when your kit opens, and to get the plain-English updates as the law moves.
General information and compliance tools, not legal advice. Privaproof is not a law practice and does not provide legal advice. Whether the Privacy Act 1988 (Cth) applies to your business depends on your turnover, structure and the services you provide. The law changes over time, so check you are working from a current version.