@sydprop said:
In terms of privacy, the rules change as of 22 Feb.
https://www.oaic.gov.au/privacy-law/privacy-act/notifiable-data-breaches-scheme
It is likely that the responsibility rests with both the agent and the supplier (1Form).
The question that I started the post with is more to do with asking if the data should be collected by an independant agency who does this for free. If the agency is collecting data for free then how are they making their money. I would rather pay a few dollars and know that my passport and drivers licence details are not going to be sold to be used for marketing purposes.
My question is more to find out if this sort of activity is legal or even ethical. In NSW there is a standard form used for tenants and this form does not ask for my passport details or my past residential purchase history.
By the time a company notifies me that it has lost all of my passport information, my mothers maiden name, my past purchase history and the reams of other sensitive personal information due to a breach, my life may be ruined already. All that the mandatory breach regulations are going to do is highlight the shonky operators who admit to losing data so the question is still – should they collect the data in the first place?
