Winds of Change: Privacy and Residential Tenancy Applications | What a Recent Landmark Decision Means for Landlords, Tenants & Property Managers

A landmark privacy decision is set to transform how residential tenancy applications are assessed across Australia. While stronger privacy protections and standardised application requirements may create a fairer process for tenants, landlords and property managers warn the changes could increase fraud risks and make tenant selection even more difficult in an already competitive rental market. This article explores the decision, its broader implications, and the difficult balance between privacy, fairness, and risk management.

Australia’s rental market is changing — and not just because of rising rents, low vacancy rates or affordability pressures. A significant privacy decision concerning residential tenancy applications may fundamentally alter the way landlords, property managers and tenants interact during the leasing process.

For years, tenancy application practices have steadily expanded. Applicants have become accustomed to handing over extensive amounts of personal information: passports, driver licences, Medicare cards, bank statements, employment contracts, payslips, rental ledgers, references, social media profiles, pet information, and sometimes even more intrusive data. In competitive rental markets, many tenants have felt compelled to provide “everything possible” just to stand out.

Now, privacy regulators are questioning whether all of that information collection is lawful, necessary, or proportionate.

The decision at the centre of this debate signals a shift toward stricter privacy compliance and a more standardised approach to residential tenancy applications. At its core, the ruling challenges whether property managers and landlords should be collecting excessive personal information before an applicant is even approved for a property.

On one hand, this is a major win for tenant privacy and transparency. On the other, many within the property industry argue the decision may unintentionally increase fraud risks, expose landlords to risk and financial consequences, reduce landlords’ ability to properly assess applicants, and create new challenges in an already strained housing market.

The reality? Both sides raise valid concerns.

And this is why the decision is so significant for the industry.

What Was the Decision About?

A determination issued today by the Privacy Commissioner finds that the 2Apply rental technology platform, operated by InspectRealEstate (IRE), collected excessive personal information and did so by unfair means.

The decision focused on the collection of personal information during the residential tenancy application process and whether the extent of information being requested from prospective tenants was reasonable, necessary, and compliant with privacy obligations.

The key principle underpinning the decision is simple:

Organisations should only collect personal information that is reasonably necessary for their functions or activities.

In practice, however, tenancy applications have evolved into highly detailed screening exercises where applicants are frequently asked to provide multiple forms of evidence for the same criterion.

For example:

  • Multiple forms of photo identification

  • Several forms of income verification

  • Extensive employment history

  • Previous tenancy details spanning years

  • Personal references

  • Financial statements

  • Emergency contacts

  • Sensitive personal data uploaded into third-party platforms

Some of the data collected is used to support a tenancy, other information is used to assess an application, whilst other information is collected for marketing purposes.

The concern raised by privacy regulators is that much of this information may exceed what is reasonably necessary to assess whether a tenant can meet their obligations under a lease. The decision appears to encourage a more restrained and standardised approach — one where only genuinely necessary information can be collected and retained.

That sounds reasonable in theory, but in practice, the implications are far more complicated.

The Positive Impact: A Fairer and More Transparent Process

There is no denying that the current tenancy application process can feel overwhelming and invasive for tenants. Many applicants have experienced:

  • Repeated requests for the same information

  • Pressure to disclose excessive personal details

  • Concerns about data breaches

  • Uncertainty about how their information is stored

  • Fear that refusing to provide additional information will disadvantage them - in particular, that they will not secure a property without handing over excessive personal information

A more standardised application framework could significantly improve this experience.

1. Better Privacy Protection for Tenants

Perhaps the biggest advantage is stronger privacy protection. Tenants routinely provide highly sensitive documents to multiple agencies and platforms, often without fully understanding:

  • Who has access to the information

  • How long it is stored

  • Whether it is securely protected

  • Whether it is shared with third parties

Limiting information collection reduces the risk of misuse, identity theft, and data breaches — all of which are increasingly common concerns. In an age where cyberattacks and information leaks dominate headlines, minimising unnecessary data collection is difficult to argue against.

2. Standardisation Could Improve Consistency

The rental application process currently varies enormously between agencies and platforms. Some applicants are asked for minimal documentation; others are effectively required to submit their entire personal and financial history. Standardised requirements could:

  • Create clearer expectations

  • Reduce confusion for tenants

  • Simplify preparation of applications

  • Improve consistency across agencies

  • Reduce arbitrary requests for unnecessary information

For tenants navigating an already stressful housing market, this consistency may be helpful.

3. Reducing Barriers for Vulnerable Applicants

The current system can disproportionately disadvantage:

  • Young renters

  • Migrants

  • Victim-survivors of domestic violence

  • Casual workers

  • Self-employed applicants

  • Individuals with disrupted housing histories

Applicants who cannot provide “perfect” documentation are often filtered out early, even if they are capable tenants. A more measured approach may create fairer opportunities for applicants who do not fit traditional assessment models.

4. Limiting Overreach by Third-Party Platforms

Another major issue is the rise of digital tenancy application platforms. Many property managers now rely on automated systems that collect and retain enormous amounts of applicant data. Critics argue these systems have normalised excessive surveillance and data harvesting within the rental sector. The decision may force greater accountability around:

  • Data storage practices

  • Information retention periods

  • Platform security

  • Consent mechanisms

  • Information-sharing arrangements

That scrutiny is long overdue.

The Industry Concern: Risk Hasn’t Disappeared

While the privacy concerns are legitimate, property managers and landlords are equally justified in asking an important question:

How can risk be properly assessed if critical verification processes are restricted?

And this is where the debate becomes far more difficult.

1. Document Fraud Is a Real and Growing Problem

One of the biggest concerns raised by industry professionals is fraud. Fraudulent documents in tenancy applications are no longer rare exceptions: they are actually increasingly common. Property managers frequently encounter:

  • Fake payslips

  • Altered bank statements

  • Fraudulent employment references

  • Manipulated identification documents

  • Fabricated rental histories

This is precisely why agencies often request multiple forms of evidence for the same criterion and will then verify that information. For example:

  • Two forms of photo ID help verify identity legitimacy

  • Multiple income documents help confirm employment stability

  • Rental ledgers support reference checks

  • Cross-checking information and references reduces manipulation risks

These practices did not emerge arbitrarily — they evolved as protective responses to increasing fraud exposure. If the ability to conduct layered verification is reduced, landlords may face significantly greater financial risk. And unlike large corporations, many landlords are ordinary individuals with mortgages, insurance obligations and financial pressures of their own. Bonds are capped at 4 weeks of rent - insurance excesses are costly, and court proceedings with associated representation add further strain for landlords.

2. Reduced Information May Lead to Worse Decision-Making

Ironically, limiting objective information could increase subjective decision-making. In a competitive market where multiple applicants appear “equivalent” on paper, how does a landlord choose? Without broader contextual information, decisions may unintentionally shift toward more personal or unconscious biases, including:

  • Age

  • Presentation

  • Appearance

  • Family composition

  • Attendance at inspections

  • Communication style

  • Cultural assumptions

That creates a serious risk of informal discrimination. A property manager trying to distinguish between ten similarly qualified applicants may begin relying more heavily on impressions rather than evidence. And that is arguably even more problematic than the current system. One other possibility is that above-market rent offers will be given even greater consideration.

3. Tenants May Lose the Ability to Strengthen Their Applications

Another unintended consequence is that some tenants may actually be disadvantaged by stricter limitations. Consider applicants who:

  • Recently changed jobs

  • Have limited rental history

  • Are newly separated

  • Are relocating interstate

  • Have casual or fluctuating income

  • Are rebuilding after financial hardship

Currently, these applicants often provide additional supporting documentation to explain their circumstances and reassure landlords. If application requirements become tightly restricted and standardised, those applicants may lose the opportunity to proactively strengthen their case. Paradoxically, a system designed to promote fairness could make nuanced applications harder to assess.

4. Property Managers Could Face Greater Liability Pressure

Property managers already operate within a heavily regulated environment. They are expected to:

  • Protect landlords’ investments

  • Prevent tenancy risk

  • Avoid discriminatory practices

  • Maintain privacy compliance

  • Ensure secure data handling

Balancing these obligations is becoming increasingly difficult. If privacy restrictions tighten while fraud risks remain high, agencies may find themselves trapped between competing legal and commercial pressures. This may ultimately lead to:

  • More conservative tenant selection

  • Increased insurance costs

  • Stricter internal risk policies

  • Reduced willingness to lease to borderline applicants

None of these outcomes necessarily benefit tenants.

The Bigger Question: Can Privacy and Risk Management Coexist?

At the heart of this issue lies a broader philosophical tension:

How do we protect privacy without undermining legitimate risk assessment?

The answer is unlikely to be found at either extreme. An entirely unrestricted system creates privacy concerns and power imbalances, but an overly restrictive system may undermine confidence in the tenancy process and create new unintended consequences. The challenge moving forward will be finding a balanced framework that:

  • Protects sensitive tenant information

  • Allows proportionate identity verification

  • Supports legitimate fraud prevention

  • Maintains fair assessment standards

  • Reduces discriminatory outcomes

That balance will not be easy to achieve.

What Could the Future Look Like?

This decision may only be the beginning. The industry may soon see:

Standardised National Application Requirements

Governments or regulators could introduce formal guidelines outlining:

  • What information can be requested

  • When it can be requested

  • How it must be stored

  • When it must be destroyed

This would significantly reshape leasing practices nationwide.

Greater Reliance on Verification Technology

If agencies cannot collect excessive documentation, they may turn to alternative verification systems, including:

  • Digital ID verification

  • Government-backed identity tools

  • Automated income verification

Technology may become the compromise between privacy and fraud prevention.

Increased Regulatory Oversight

Privacy compliance within property management is likely to face far greater scrutiny moving forward. Agencies may need stronger:

  • Data retention policies

  • Consent processes

  • Cybersecurity measures

  • Staff training programs

  • Audit systems

For many businesses, this will require substantial operational change.

Final Thoughts: A Necessary Conversation for the Industry

The decision represents a genuine turning point for Australia’s rental sector. For tenants, it offers the promise of greater dignity, fairness, and privacy protection in what has often become an intrusive and stressful process. For landlords and property managers, however, it raises legitimate concerns about fraud, risk exposure and the practical realities of tenant assessment in a fiercely competitive market.

Importantly, this is not a simple “right versus wrong” debate: both perspectives reflect real-world problems. The current system clearly allows excessive information collection, but reducing verification mechanisms without addressing fraud and market pressures may simply create new risks rather than solving old ones. Ultimately, the industry must grapple with a difficult truth:

When objective information becomes limited, subjective judgment often fills the gap.

And that may create even greater concerns around fairness, consistency, and discrimination.

The winds of change are clearly blowing through residential tenancy applications.

The question now is whether the industry can adapt in a way that protects both privacy and practical risk management — without sacrificing one for the other.