Privacy Issues and Management Rights

05 January 09

We often hear of complaints being made to on-site managers of a breach of privacy when people don’t agree with the way their personal details are being used. This article briefly explores the basis for such claims by owners and guests alike.

In Australia there are no common law rights to privacy, so we need to look to the legislation in the area.

In New South Wales the Privacy and Personal Information Protection Act 1998 (PPIP Act) governs management of personal information by public sector agencies such as government departments and authorities. The NSW Office of the Privacy Commissioner is also established by the PPIP Act. The Commissioner has the power to investigate and conciliate privacy breaches by private organisations and individuals.

The Commonwealth legislation, the Privacy Act 1988 (Privacy Act) establishes 10 National Privacy Principles (NPPs) that apply to private sector organisations. Small businesses are excluded from the term ‘organisation’.

Small business is defined in the Privacy Act as a business that had a turnover of less than $3,000,000 for the previous financial year. Most Management Rights operators would be exempted from complying with the Privacy Act based on this definition. However the regulations prescribe that a small business that operates a residential tenancy database is included in the term ‘organisation’ and accordingly is required to comply with the 10 NPPs.

A ‘residential tenancy database’ is defined as a database that:
(a) stores personal information in relation to an individual’s occupation of residential premises as a tenant; and
(b) can be accessed by a person other than the operator of the database or a person acting for the operator.

Personal Information is defined as information or an opinion (including part of a database) whether true or not and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained from the information or opinion.

Keeping a residential tenancy database is pretty standard in the industry and you should carefully consider who has access to your database to determine whether you must legally comply with the 10 NPPs.

There is also the provision for small business operators to ‘opt in’ to the Privacy Act. The benefits in doing so include increased customer confidence. You should be fully versed in all the obligations of the Privacy Act before electing to opt it however.

The 10 NPPs are set out in Schedule 3 of the Privacy Act and cover the following areas:
1. Collection – restrictions in obtaining personal information;
2. Use and disclosure – restrictions on how personal information may be used and disclosed to others;
3. Data Quality – ensuring personal information is accurate, complete and up to date;
4. Data security – protection of personal information from misuse, loss, unauthorised access, modification or disclosure and destruction or de-indentifying personal information no longer required;
5. Openness – maintaining clear policies on management of personal information and letting people know what sort of personal information is held about them, how it is collected, held, used and disclosed;
6. Access and correction – providing people with access to the personal information held about them upon request except in limited circumstances;
7. Identifiers – an organisation must not use someone else’s identifier as its own identifier (e.g. Centrelink number or tax file number);
8. Anonymity – where it is lawful and practical, individuals must have the option of not identifying themselves when entering transactions with the organisation;
9. Transborder data flows – personal information may only be transferred to someone in a foreign country in restricted circumstances;
10. Sensitive Information – may only be collected with consent or in certain restricted circumstances. Sensitive information is information or an opinion about an individual’s racial or ethnic origin, political opinions, membership of political associations, professional or trade associations or trade unions, religious beliefs or affiliations, philosophical beliefs, sexual practices or preferences or criminal record that is also personal information.


An act or practice breaches a NPP if and only if it is contrary to or inconsistent with that NPP. The Commissioner may investigate any complaints that there has been a breach of the NPPs and following the investigation may make a range of declarations, including that the offender pay compensation and take action to redress any loss or damage suffered by the complainant.


You should also consider the following:
• the Do Not Call Register Act 2006 restricts ‘telemarketing’ throughout Australia and is relevant when marketing to prospective guests;
• Companies that operate Management Rights businesses are also governed by the Corporations Act 2001, which prohibits the company from making unsolicited approaches to owners to join the on-site letting scheme.


Contact Us Now

Phone:+ 61 7 5552 6666
Fax:+ 61 7 5528 0955
Address:Level 2, 17 Welch St Southport, Qld, 4215
Postal:PO Box 1876
Southport 4215



Most Popular Articles

Management Rights News

Number of news items returned: 1 to 15 records of 111

The Different Types of Caretaking Agreements

17 November 2014


 Essentially, there are three types of caretaking agreements in the marketplace: “Do” agreements; “Supervisory” agreements; Hybrid “Do” and “Supervisory” agreements. “Do” Agreements A “Do” agreement ...

Unit Entitlement in NSW

11 February 2013


The issue of unit entitlement was recently looked at again as part of the Department of Fair Trading’s Discussion Paper ...


16 July 2015


This month, we continue our examination of various clauses within caretaking and letting agreements and the important considerations to be ...

Is it Time to Change the Management Rights Model?

13 May 2013


I think the time is right for the management rights industry to explore the creation of a new model. I ...

What Managers Need to know about the NSW Child Window Safety Devices Act 2013

17 January 2014


Resident building managers have general obligations under their Caretaking Agreements to assist Owners Corporations with building and compliance issues. Managers ...

Be Careful with your Proxies!

03 October 2013


In June this year, I wrote an article headed “Proxy Farming”, which set out the relevant restrictions on caretakers using ...

Short-Term Letting, Occupancy Limits And Tenant Representatives In NSW Strata

25 July 2017


Occupancy Limits By-laws in NSW may limit the number of adult residents in a lot. The limit however cannot be fewer ...

The Law Relating to Management Rights in Queensland

14 June 2010


This article looks at the legislation in Queensland dealing with the constraints and obligations imposed on developers whilst they control ...

Duty Bound or Duty Free - Do you know what Your Duties Are?

23 September 2013


The day-to-day care and maintenance of your resort facilities and communal areas is essential to its ongoing performance and success. ...

Caretaking and Letting Agreement Essentials Part 1

03 September 2014


We regularly prepare caretaking and letting agreements for new developments. However, it has become increasingly common for us to be ...

For Your Eyes Only!

15 April 2013


Information is a commodity and for many, information is power. As you would most likely know from personal experience, the right ...

Owners Corporation Insurance - How do we Stop the Spiraling Costs?

12 August 2013


In NSW, all strata schemes are required to be insured for the full replacement value, as well as public liability ...

Proxy Farming

10 June 2013


It is often stated that Strata and Community Schemes represent the “fourth tier of Government” and, as such, voting (either ...

"Legal Action", All those in Favour say "Why"

15 July 2013


I was recently involved in a New South Wales matter where an Executive Committee had received extensive legal advice from ...

Not Getting the Fundamentals Right

15 October 2013


A recent decision of the NSW Consumer, Trader and Tenancy Tribunal (CTTT) has highlighted the importance of ensuring that the ...