Applying for a rental in Australia can feel like handing over your entire life. In a competitive market, many renters worry that if they do not provide every document requested, they will miss out on the property.
Recent developments from the Australian Government and the national privacy regulator make it clear that this is not how it has to be. Renters can verify who they are and show they can afford the rent without oversharing sensitive personal information.
A major change in how rental applications should work
In April 2026, the Office of the Australian Information Commissioner (OAIC) issued a landmark decision against the 2Apply rental platform, operated by InspectRealEstate. The Privacy Commissioner found that the platform collected personal information that was not reasonably necessary for its functions and did so by unfair means.
The determination identified information such as gender, student status, citizenship status, visa expiry, and details of previous living history as unnecessary for the platform’s core functions. The Commissioner also found that the form used “confirmshaming”, biased framing, and bundled consent, which unfairly pressured individuals into disclosing more information than they might otherwise choose to share.
This decision is important because it sets a clear standard: rental platforms and agents should collect only what is reasonably necessary to assess an application, and they should do so in a fair and transparent way.
In August 2026, the Australian Government announced that a completed trial using Digital ID and the Consumer Data Right (CDR) showed renters can verify their identity and capacity to pay rent without handing over copies of identity documents, payslips, or bank statements. The trial demonstrated that it is possible to reduce the collection of unnecessary personal information while still verifying a renter’s identity and rental affordability.
What a rental application is really trying to prove
A rental application generally needs to establish three things about an applicant:
Their identity and contact details
Their ability to pay rent
Their likelihood of looking after the property
Information that does not help answer these questions is less likely to be reasonably necessary. For example, gender, citizenship, visa expiry, or details about dependents are not inherently required to assess whether someone can pay rent and maintain a property.
This does not mean every request for additional information is automatically unlawful. What is reasonable can depend on the circumstances and the organisation collecting the information. However, the OAIC decision makes it clear that blanket collection of sensitive or excessive data is not acceptable.
Practical checks before you upload documents
You cannot always refuse every request for information, but you can be more selective and cautious about what you share and how you share it.
1. Use genuine agencies and platforms
Apply through recognised real estate agencies, property managers, or established rental platforms. Avoid sending personal documents in response to unsolicited messages, social media posts, or links from unknown sources.
If you are unsure, search for the agency or platform online, check their official website, and confirm contact details before uploading anything.
2. Ask why a document is needed
Before uploading a document, consider whether it is clearly related to identity, income, or rental history. If a field or request seems unusual, ask the agent or platform why it is required and how it will be used.
A legitimate provider should be able to explain the purpose of each piece of information they collect.
3. Look for secure verification options
Where available, use secure verification methods rather than emailing or uploading copies of identity documents and financial records.
The Australian Government’s Digital ID and CDR trial showed that renters can verify their identity and income without sharing full copies of passports, driver licences, payslips, or bank statements. Some platforms now offer identity verification through accredited providers and income checks through secure data sharing, rather than manual document uploads.
4. Check the privacy policy
Before applying, read the platform or agency’s privacy policy. Look for:
What personal information they collect
Why they collect it
Who they share it with
How long they keep it
How you can access or correct your information
In 2025–2026, the OAIC conducted a privacy compliance sweep that included the real estate sector, with entities facing potential penalties of up to $66,000 for non-compliant privacy policies. This is a sign that regulators are paying closer attention to how rental platforms handle personal data.
5. Keep a record of what you submit
Keep copies of applications, documents you upload, and any communications with agents or platforms. This can help if you later need to:
Request access to your personal information
Ask for corrections
Make a privacy complaint
Prove what was submitted and when
6. Be cautious with links and forms
Only enter personal information on official websites or trusted platforms. Do not click on links in unexpected emails or messages that ask you to “verify your details” or “complete your application” without confirming the source first.
If something feels off, pause and verify before proceeding.
Where EzyFlats fits
EzyFlats is designed to reduce the need for renters to overshare personal information while still providing enough detail for a reliable application.
Renters verify government-issued identity through Stripe Identity, rather than sending ID copies directly to individual landlords.
The platform verifies income and references before applications are accepted, reducing the need for manual document sharing.
Listings are pre-screened, and EzyFlats uses digital agreements and condition reports to create a clearer, more secure process.
EzyFlats cannot remove all privacy risk, and renters should still read agreements and privacy information carefully. But a structured process with secure verification and clear data practices is exactly the standard the OAIC expects from rental platforms.
If you think too much information has been collected
If you believe a platform or agent has collected more personal information than necessary, or has done so in an unfair way, you can:
Raise the issue directly with the organisation
Request access to or correction of your personal information
Make a complaint to the OAIC, which has indicated a stronger focus on enforcement and meaningful outcomes in privacy matters
The OAIC’s 2Apply determination is a clear signal that renters should not be forced to hand over excessive personal information simply to apply for a rental.
The practical takeaway
A rental application should be about proving your identity, your ability to pay rent, and your suitability as a tenant. It should not require you to disclose sensitive personal details that are not reasonably necessary for those purposes.
Use genuine platforms, ask why information is needed, look for secure verification options, check privacy policies, and keep records of what you submit. These simple steps can help you apply for rentals with more confidence and less oversharing.
This article is general information only and is not legal or privacy advice. Privacy obligations and what is “reasonably necessary” can depend on the organisation, the type of agreement, and applicable laws. For specific guidance, refer to the Office of the Australian Information Commissioner (OAIC) and relevant state or territory consumer and tenancy authorities.