Part 10A—Residential tenancy databases

439A Definitions

In this Part—

database means a system, device or other thing used for storing information, whether electronically or in some other form;database operator means an entity that operates a residential tenancy database;

inaccurate, in relation to personal information in a residential tenancy database, includes information that is inaccurate because—

(a) the information indicates that the person owes a residential rental provider an amount that is more than the bond; and (b) the amount owed was paid to the residential rental provider more than 3 months after the amount became due;

* * * * *

list, personal information in a residential tenancy database—

(a) means—

(i) enter the personal information into the database; or (ii) give the personal information to a database operator or someone else for entry into the database; and

(b) includes amend personal information about a person in the database to include additional personal information about the person;

out of date, in relation to personal information in a residential tenancy database, means the information is no longer accurate because—

(a) for a listing made on the basis the person owes a residential rental provider an amount that is more than the bond, the amount owed was paid to the residential rental provider within 3 months after the amount became due; or (b) for a listing made on the basis the Tribunal has made a possession order, the order has been revoked following a review of the making of the order;

personal information means information (including an individual's name) or an opinion, whether true or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion;rented premises includes room, site, caravan and Part 4A dwelling;

renter includes—

(a) resident; and (b) site tenant; and (c) former renter, former resident or former site tenant;

residential rental agreement includes residency right and site agreement;

residential rental provider includes—

(a) rooming house operator; (b) caravan park owner; (c) caravan owner; (d) site owner;

(e) agent of a residential rental provider or a person referred to in paragraphs (a) to (d);

residential tenancy database means a database—

(a) containing personal information—

(i) relating to, or arising from, the occupation of rented premises under a residential rental agreement; or (ii) entered into the database for reasons relating to, or arising from, the occupation of rented premises under a residential rental agreement; and

(b) with an intended purpose of use by residential rental providers for checking a person's tenancy history for deciding whether a residential rental agreement should be entered into with the person.

* * * * *

* * * * *

439B Application

This Part does not apply to a residential tenancy database kept by an entity (including a Department of the government of a State or Territory) for use only by that entity or its officers, employees or agents.

439C Notice of usual use of database

(1) This section applies if—

(a) a person (the applicant) applies to a residential rental provider to enter into a residential rental agreement; and

(b) the residential rental provider usually uses one or more residential tenancy databases for deciding whether a residential rental agreement should be entered into with a person.

(2) The residential rental provider must, when the application is made, give the applicant written notice stating the following—

(a) the name of each residential tenancy database the residential rental provider usually uses, or may use, for deciding whether a residential rental agreement should be entered into with a person;

(b) that the reason the residential rental provider uses a residential tenancy database referred to in paragraph (a) is for checking an applicant's tenancy history; (c) for each residential tenancy database referred to in paragraph (a), how persons may contact the database operator who operates the database and obtain information from the operator.

Penalty: 60 penalty units.

(3) Subsection (2) applies in relation to a residential tenancy database whether or not the residential rental provider intends to use the database for deciding whether a residential rental agreement should be entered into with the applicant.

(4) However, the residential rental provider is not required to give the written notice referred to in subsection (2) if a written notice stating the matters referred to in that subsection was given to the applicant not more than 7 days before the application was made.

ExampleThe residential rental provider gave a written notice stating the matters referred to in subsection (2) to the applicant when the applicant obtained the application form and that was less than 7 days before the applicant made the application.

439D Notice of listing if database used

(1) This section applies if—

(a) a person (the applicant) applies to a residential rental provider to enter into a residential rental agreement; and

(b) the residential rental provider uses a residential tenancy database for checking whether personal information about the applicant is in the database; and (c) personal information about the applicant is in the database.

(2) The residential rental provider must, as soon as possible but within 7 days after using the database, give the applicant a written notice stating—

(a) the name of the database; and (b) that personal information about the applicant is in the database; and (c) the name of each person who listed the personal information in the database; and (d) how and in what circumstances the applicant can have the personal information removed or amended under this Part.

Penalty: 60 penalty units.

(3) Subsection (2)(c) does not apply if the residential tenancy database does not identify the person who listed the personal information in the database.

439E Listing can be made only for particular breaches by particular persons

(1) A residential rental provider or database operator must not list personal information about a person in a residential tenancy database unless—

(a) the person was named as a renter in a residential rental agreement that has ended; and

(b) the person has breached the residential rental agreement or section 91ZI, 91ZJ, 91ZM, 91ZO, 91ZQ, 91ZV, 142ZB, 142ZC, 142ZF, 142ZG, 142ZI, 206AQ, 206AR, 206AU, 206AW, 206AY, 207W, 207X, 207ZA, 207ZC or 207ZD; and (c) because of the breach, either—

(i) the person owes the residential rental provider an amount that is more than the bond; or (ii) the Tribunal has made a possession order; and

(d) the personal information—

(i) relates only to the breach; and (ii) is accurate, complete and unambiguous.

(2) Without limiting subsection (1)(d)(ii), the personal information must indicate the nature of the breach.

Examples1 An example of how personal information can indicate the nature of a breach is including the words "rent arrears" in personal information about a person who has breached a residential rental agreement by failing to pay rent.2 An example of how personal information can indicate the nature of a breach is including the words "damage to premises" in the personal information about a person who has breached a residential rental agreement by damaging premises.

(3) A residential rental provider or database operator must not list personal information about a person in a residential tenancy database if—

(a) the person breached the residential rental agreement; and (b) that breach was a result of an act or a circumstance of family violence or personal violence experienced by the person.

439F Further restriction on listing

(1) A residential rental provider or database operator must not list personal information about a person in a residential tenancy database unless the residential rental provider or operator has, without charging a fee—

(a) given the person a copy of the personal information; or (b) taken other reasonable steps to disclose the personal information to the person.

Penalty: 60 penalty units.

(2) A residential rental provider or database operator must not list personal information about a person in a residential tenancy database unless the residential rental provider or operator has given the person at least 14 days to review the personal information and make submissions—

(a) objecting to its entry into the database; or (b) about its accuracy, completeness and clarity.

Penalty: 60 penalty units.

(3) A residential rental provider or database operator must not list personal information about a person in a residential tenancy database unless the residential rental provider or operator has considered any submissions made under subsection (2).

Penalty: 60 penalty units.

(4) Subsections (1) and (2) do not apply if the residential rental provider or database operator cannot locate the person after making reasonable enquiries. (5) Subsections (2) and (3) do not apply—

(a) to information that, at the time of the listing, is contained in publicly available court or Tribunal records; or (b) to a listing involving only an amendment of personal information about a person under section 439G.

(6) A residential rental provider or database operator must not list personal information about a person in a residential tenancy database if the information relates to—

(a) termination of a residential rental agreement and entry into a new residential rental agreement as a result of an order under section 91W; or (b) a notice to vacate that the Tribunal found is invalid under section 91ZZT, 91ZZV, 142ZY, 142ZZA, 206AZN, 206AZP or 207O.

(7) A residential rental provider or database operator must not list personal information about a person in a residential tenancy database if—

(a) the person has objected to the residential rental provider, that person's agent or the database operator about the listing of information on the database because the information relates to an act or a circumstance of family violence or personal violence experienced by the person; and (b) the objection is accompanied by a copy of any prescribed documentary evidence.

439G Ensuring quality of listing—residential rental provider's obligation

(1) This section applies if a residential rental provider who lists personal information in a residential tenancy database becomes aware that the information—

(a) is inaccurate, incomplete, ambiguous or out of date; or (b) relates to an act or a circumstance of family violence or personal violence experienced by the person whose personal information is listed.

(2) The residential rental provider must, within 7 days, give written notice of the following to the database operator who keeps the database—

(a) if the information is inaccurate, incomplete or ambiguous—

(i) that the information is inaccurate, incomplete or ambiguous; and (ii) how the information must be amended so that it is no longer inaccurate, incomplete or ambiguous;

(b) if the information is out of date, that the information is out of date and must be removed;

(c) if the information relates to an act or circumstance of family violence or personal violence experienced by the person whose personal information is listed—

(i) that the information relates to an act or a circumstance of family violence or personal violence experienced by the person whose personal information is listed; and (ii) that the information must be removed.

Penalty: 150 penalty units in the case of a natural person;

750 penalty units in the case of a body corporate.

ExampleA residential rental provider lists, in a residential tenancy database, personal information about a renter who owes the residential rental provider an amount that is more than the bond. The renter pays the amount owed to the residential rental provider more than 3 months after the amount became due. The residential rental provider must, within 7 days after the residential rental provider becomes aware of the payment, give the database operator who keeps the database written notice of—(a) the personal information being inaccurate; and(b) the details of the payment to be included in the personal information so that it is no longer inaccurate.

(3) The residential rental provider must keep a copy of the written notice for one year after it was given under subsection (2).

Penalty: 25 penalty units.

439H Ensuring quality of listing—database operator's obligation

(1) This section applies if a residential rental provider who has listed personal information in a residential tenancy database gives the database operator who operates the database a written notice stating that the personal information must be—

(a) amended in a stated way to make it accurate, complete and unambiguous; or (b) removed.

(2) The database operator must amend the personal information in the stated way, or remove the personal information, within 14 days after the operator is given the written notice.

Penalty: 150 penalty units in the case of a natural person;

750 penalty units in the case of a body corporate.

439I Providing copy of personal information listed

(1) A residential rental provider who lists personal information about a person in a residential tenancy database must, if asked in writing by the person, give the person a copy of the information within 14 days after the request is made.

Penalty: 60 penalty units.

(2) A database operator must, if asked in writing by a person whose personal information is in the residential tenancy database kept by the operator, give the person a copy of the information within 14 days after the request is made.

Penalty: 20 penalty units.

(3) If a residential rental provider charges a fee for giving personal information under subsection (1), or a database operator charges a fee for giving personal information under subsection (2), the subsection applies only if the fee has been paid.

(4) A fee charged by a residential rental provider for giving personal information under subsection (1), or by a database operator for giving personal information under subsection (2)—

(a) must not be excessive; and

(b) must not apply to lodging a request for accessing the information; and

(c) must not apply to the first instance of a database operator and a residential rental provider giving personal information to a person under subsection (2) within any 12 month period.

439J Notifying relevant non-parties of Tribunal order about listing

(1) This section applies if—

(a) under section 439M, the Tribunal makes an order that a person must, in relation to a residential tenancy database—

(i) amend personal information in a stated way; or (ii) remove all or particular personal information about a person; and

(b) the person against whom the order is made (the relevant person) is not a party to the proceeding for the dispute.

(2) The Tribunal must ensure a copy of the order is given to the relevant person.

439K Keeping personal information listed

(1) A database operator must not keep personal information about a particular person in the operator's residential tenancy database for longer than—

(a) 3 years; or (b) if, under the national privacy principles, the operator of the database is required to remove the personal information before the 3 year period referred to in paragraph (a) ends, the period ending when the information must be removed under the national privacy principles.

Penalty: 150 penalty units in the case of a natural person;

750 penalty units in the case of a body corporate.

(2) However, a database operator may keep the person's name in the operator's residential tenancy database for longer than the period stated in subsection (1)(a) or (b) if—

(a) other personal information about the person in the database is attached to the name; and (b) the other personal information is not required to be removed under subsection (1) or another law.

(3) This section does not limit the operation of this Part or a provision of another law that requires the removal of the personal information. (4) In this section—

national privacy principles means the principles stated in Schedule 3 of the Privacy Act 1988 of the Commonwealth.

439L Application to Tribunal for removal or amendment of listing

(1) A person may apply to the Tribunal for an order—

(a) prohibiting a residential rental provider or a database operator from listing personal information about that person that a residential rental provider or database operator proposes to list on a residential tenancy database; or

(b) requiring a residential rental provider or a database operator to amend personal information about that person that is listed or to be listed in a residential tenancy database; or

(c) requiring a residential rental provider or a database operator to remove personal information about that person that is listed in a residential tenancy database—

if the residential rental provider or database operator fails to comply with section 439D, 439E, 439F or 439G in relation to the listing of that personal information.

(2) A person may apply to the Tribunal for an order requiring a database operator to remove personal information about that person from a residential tenancy database if the database operator has failed to comply with section 439H or 439K in relation to the listing of that personal information.

(2A) A person who is a victim of family violence or personal violence may apply to the Tribunal for an order requiring a residential rental provider, that person's agent or a database operator to remove or not list personal information about the person in a residential tenancy database.

(2B) A person may apply to the Tribunal for an order requiring a database operator to amend a listing of personal information on a residential tenancy database or to remove any information.

(2C) A person may apply to the Tribunal for an order requiring a residential rental provider, that person's agent or a database operator to remove or not list personal information about the person. (3) An application may be made under this section irrespective of whether the personal information in respect of which the application is made was listed in a residential tenancy database before, on or after the commencement of this Part.

NoteThis section does not provide for claims for compensation. If a court finds a person guilty of an offence or convicts a person of an offence under this Part, a person who has suffered injury as a direct result of the offence may apply to the court for compensation under Division 2 of Part 4 of the Sentencing Act 1991.

439M What can the Tribunal order?

(1) Subject to subsections (1A), (1B) and (1C), if an application is made under section 439L, the Tribunal may make an order—

(a) prohibiting a residential rental provider, that person's agent or database operator from listing personal information about the applicant in a residential tenancy database; or

(b) requiring a residential rental provider, that person's agent or database operator to amend personal information about the applicant that is or is to be listed in a residential tenancy database; or

(c) requiring a residential rental provider, that person's agent or database operator to remove personal information about the applicant that is listed in a residential tenancy database.

(1A) Before making an order under subsection (1) in respect of an application under section 439L(2A), the Tribunal is to be satisfied that a breach of a residential rental agreement by the person was a result of family violence or personal violence committed by another person.

(1B) Before making an order under subsection (1) in respect of an application under section 439L(2B), the Tribunal is to be satisfied that the personal information poses a risk to the person's personal safety because it is listed.

(1C) Before making an order under subsection (1) in respect of an application under section 439L(2C), the Tribunal is to be satisfied that the listing is or would be unjust in all of the circumstances, having regard to—

(a) the reason the information is listed; and (b) the conduct of the renter; and (c) whether there is a real likelihood that the listing would have a disproportionate impact on the ability of the renter to access future rental accommodation.

(2) The Tribunal may make an order under subsection (1) if the Tribunal determines that—

(a) the residential rental provider has not provided written notice to the applicant in accordance with section 439D(2); or

(b) the residential rental provider or database operator has listed personal information in the residential tenancy database in contravention of section 439E or 439F; or

(c) the residential rental provider has not provided written notice in accordance with section 439G in respect of personal information in the residential tenancy database that the residential rental provider is aware is inaccurate, incomplete, ambiguous or out of date; or

(d) the database operator has not amended or removed personal information listed in a residential tenancy database in accordance with section 439H(2).