Australia's Privacy Ruling on 2Apply: The Rental Form That Collected Too Much Is the One You Filled In

The most consequential privacy decision for Australian renters in years was not made against a bank or a telco. It was made against the form you fill in to rent a flat.

In April 2026, Privacy Commissioner Carly Kind published the determination IRE Pty Ltd (Privacy) [2026] AICmr 24. The respondent, IRE Pty Ltd trading as InspectRealEstate, operates 2Apply, one of the most widely used rental application platforms in Australia, released in March 2020 and responsible for processing more than 8.5 million tenancy applications. The Commissioner found the platform collected personal information that was not reasonably necessary for its functions, breaching Australian Privacy Principle 3.2, and that it did so by unfair means, breaching APP 3.5.

Two things make this ruling different from every "rent tech asks for too much" story that came before it. First, it names the mechanism. Second, it makes redaction something a regulator explicitly endorses, not something you have to argue for.

The mechanism: the form itself

The APP 3.5 finding is the part worth slowing down on. "Fair and lawful means" is where the Commissioner assessed what is formally called the platform's online choice architecture, and informally called dark patterns. It was the first time the OAIC formally applied that analysis under the Privacy Act.

The Conversation's breakdown puts the mechanism plainly: the 2Apply form told applicants that providing personal information would "help speed up your application process," and that not providing it "may affect whether you are considered as a suitable tenant." The Commissioner found that framing unfair. Not because the statements were false, but because they make the volume of your personal data read as a proxy for your suitability as a tenant, which it is not.

That is the exact trap the renter is in. In a tight market, you cannot simply say "no, I would prefer not to disclose my citizenship status, my dependants' names, and my visa expiry for this tenancy." So the platform collects it, the agency receives it, and the landlord sees it, none of them needing any of it. The determination found the collection could increase the risk of discrimination against applicants, which is the quiet cost of a form that treats oversharing as an application signal.

The remedy was calibrated: IRE was ordered to cease collecting the offending categories within 60 days and to engage an independent reviewer to audit the platform, including its choice architecture. IRE has since applied to the Administrative Review Tribunal for the determination to be reviewed, so the story is not finished. But the standard is set, and it will be difficult for the rest of the rent tech industry to ignore.

What the regulator already tells you to do with your own documents

Here is the part most coverage of the ruling skips, and it is the part that matters on a Tuesday when the agent emails you asking for documents.

The OAIC's own guidance does not stop at punishing the platform. It tells you, the applicant, what is acceptable to withhold:

• On tax file numbers, the OAIC states plainly that if a document you have been asked to supply includes your TFN, you are allowed to cross out or remove your TFN before you hand the document over. An agent assessing your ability to pay the rent does not need it. A handful of institutions may legitimately ask for your TFN: your employer after you are hired, your bank, your super fund, your registered tax agent, Centrelink. A real estate agent is not on that list.
• On identity documents, the OAIC's tenancy guidance says that if a real estate agent needs a copy of an ID document, you should think about blanking out personal information the agent does not need. It goes further on the agent's side: a government related identifier, such as a driver licence number, generally must be blanked out when the document is copied or disclosed.

Read those two statements together. The regulator is telling you that the copy you hand over is yours to trim, and that the platform is not allowed to collect what it does not need. The determination makes the second half enforceable. The guidance was already doing the first.

What to cover on the payslip, specifically

An agent assessing a rental application is looking for one thing on a payslip: that you can pay the rent. Everything else on the document is either an identifier or a window into your financial life that has no bearing on the lease.

Cover these:

• Your tax file number, if it appears
• The BSB and bank account number your wages are deposited into
• Your superannuation fund member number
• Your home address
• Any employee or payroll identifier
• Date of birth, if shown

Leave these visible:

• Your name
• Your employer
• The pay period dates
• Gross pay and net pay
• Year to date totals

That is the whole job. A redacted payslip still proves income. An unredacted one also proves where your money lands, who your fund is, and what your account numbers are, which is the part an agent never needs and the part that becomes a problem if that copy later lands in the wrong inbox or the wrong data breach. You have seen the shape of this story before: the document set people email around unredacted is the exact set that gets exposed later, which is why we wrote about it in how to redact a pay stub for a landlord and in how to redact a bank statement before sharing it.

The same logic runs through the rest of the application. If you are handing over a driver licence, the OAIC's tenancy page is telling you to blank the licence number and anything else the agent does not need. Our guide to redacting a driver's licence walks through what stays and what goes. If you are proving assets with a superannuation statement, the superannuation statement guide covers the member number and balance fields that should stay off the page.

Why "the file never leaves your browser" matters here

The 2Apply determination is, at its core, a story about copies. One applicant, five years, 8.5 million applications, every field of every person in a platform and an agency and a landlord's files, most of it never used, all of it a standing collection waiting for a breach or a leak. The Commissioner's own analysis leaned on the point that these platforms are more than middlemen: they collect and enable the collection of personal information in their own right.

Redaction does not solve that. You cannot redact 2Apply. What it changes is the input side: the copy you hand over. Every document you send out unredacted becomes a copy in a system you cannot inspect, with a retention policy you cannot see, and a security posture you cannot check. Every document you send redacted is a copy where the identifiers are simply not in the file. There is no difference between "we would never look at your TFN" and "your TFN is not in the file." The first is a promise from an organisation you have no leverage over. The second is a fact about the bytes.

That is the whole product, and it is worth being precise about: RedactID runs entirely in your browser. The file is opened by your own device, the redaction is flattened into the exported image or PDF, and nothing is uploaded to a server. For a rental application that means the redaction step does not create a new copy of your documents somewhere else. It creates a smaller, safer copy, and that is the version the agent keeps.

You can see pricing here. There is a free daily allowance if you just need to redact the payslip before tonight's application, and credit packs if you are in the thick of a move and sending documents to a dozen people.

Related

• What to redact on a rental application
• Is it safe to email a photo of your ID
• How we handle your files