After section 48T of the Principal Act , the following Part is inserted:

PART 4C - Residential Tenancy Databases

48U.     Interpretation

In this Part –

database means a system, device or other thing used for storing information, whether electronically or in some other form;

database operator means an entity that operates a residential tenancy database;

inaccurate , in relation to personal information in a residential tenancy database, includes information that is inaccurate because –

(a) the information indicates that the person owes an owner an amount that is more than the security deposit for a residential tenancy agreement; and

(b) the amount owed was paid to the owner more than 3 months after the amount became due;

list , personal information in a residential tenancy database –

(a) means –

(i) enter the personal information into the database; or

(ii) give the personal information to a database operator or someone else for entry into the database; and

(b) includes amend personal information about a person in the database to include additional personal information about the person;

out of date , in relation to personal information in a residential tenancy database, means the information is no longer accurate because –

(a) for a listing made on the basis the person owes an owner an amount that is more than the security deposit for a residential tenancy agreement, the amount owed was paid to the owner within 3 months after the amount became due; or

(b) for a listing made on the basis the Court has made an order under section 41 terminating the residential tenancy agreement, the order has been revoked following a review of the making of the order;

personal information means information (including an individual's name) or an opinion, whether true or not, about an individual whose identity is apparent, or can be reasonably ascertained, from the information or opinion;

residential tenancy database means a database –

(a) containing personal information –

(i) relating to, or arising from, the occupation of residential premises under a residential tenancy agreement; or

(ii) entered into the database for reasons relating to, or arising from, the occupation of residential premises under a residential tenancy agreement; and

(b) with an intended purpose of use by owners or agents of owners for checking a person's tenancy history for deciding whether a residential tenancy agreement should be entered into with the person.

48V.     Application of Part

This Part does not apply to a residential tenancy database kept by an entity, including a department of the government of a State or Territory, for use only by that entity or its officers, employees or agents.

48W.     Notice of usual use of database

(1)  This section applies if –

(a) a person ( the applicant ) applies to an owner, whether or not through the owner's agent, to enter into a residential tenancy agreement; and

(b) the owner or, if the application is made through the owner's agent, the owner or agent usually uses one or more residential tenancy databases for deciding whether a residential tenancy agreement should be entered into with a person.

(2)  The owner or agent must, when the application is made, give the applicant written notice stating the following:

(a) the name of each residential tenancy database the owner or agent usually uses, or may use, for deciding whether a residential agreement should be entered into with a person;

(b) that the reason the owner or agent uses a residential tenancy database specified under paragraph (a) is for checking an applicant's tenancy history;

(c) for each residential tenancy database specified under paragraph (a) , how persons may contact the database operator who operates the database and obtain relevant information from the operator.

(3)  Subsection (2) applies in relation to a residential tenancy database whether or not the owner or agent intends to use the database for deciding whether a residential tenancy agreement should be entered into with the applicant.

(4)  However, the owner or agent is not required to give the written notice referred to in subsection (2) if a written notice stating the matters mentioned in the subsection was given to the applicant not more than 7 days before the application was made.

48X.     Notice of listing if database used

(1)  This section applies if –

(a) a person ( the applicant ) applies to an owner, whether or not through the owner's agent, to enter into a residential tenancy agreement; and

(b) the owner or, if the application is made through the owner's agent, the owner or agent uses a residential tenancy database for checking whether personal information about the applicant is in the database; and

(c) personal information about the applicant is in the database.

(2)  The owner or agent must, as soon as practicable but within 7 days after using the database, give the applicant a written notice stating –

(a) the name of the database; and

(b) that personal information about the applicant is in the database; and

(c) the name of each person who listed the personal information in the database; and

(d) how and in what circumstances the applicant can have the personal information removed or amended under this Part.

Penalty:  Fine not exceeding 50 penalty units.

48Y.     Listing can be made only for particular breaches by particular persons

(1)  An owner, owner's agent or database operator must not list personal information about a person in a residential tenancy database unless –

(a) the person was a tenant under a residential tenancy agreement that has ended; and

(b) the person has breached the agreement; and

(c) because of the breach, either –

(i) the person owes the owner an amount that is more than the security deposit for the agreement; or

(ii) the Court has made an order under section 41 terminating the residential tenancy agreement; and

(d) the personal information –

(i) relates only to the breach; and

(ii) is accurate, complete and unambiguous.

Penalty:  Fine not exceeding 50 penalty units.

(2)  Without limiting subsection (1)(d)(ii) , the personal information must indicate the nature of the breach.

48Z.     Further restrictions on listing

(1)  An owner, owner's agent or database operator must not list personal information about a person in a residential tenancy database unless the owner, agent or operator –

(a) has, without charging a fee –

(i) given the person a copy of the personal information; or

(ii) taken other reasonable steps to disclose the personal information to the person; and

(b) has given the person at least 14 days to review the personal information and make submissions –

(i) objecting to its entry into the database; or

(ii) about its accuracy, completeness and clarity; and

(c) has considered any submissions made.

Penalty:  Fine not exceeding 50 penalty units.

(2)  Subsection (1) does not apply if the owner, owner's agent or database operator cannot locate the person after making reasonable enquiries.

(3)  Subsection (1)(b) and (c) do not apply –

(a) to information that, at the time of the listing, is contained in publicly available Court records; or

(b) to a listing involving only an amendment of personal information about a person under section 48ZA .

48ZA.   Ensuring quality of listing – owner's or agent's obligation

(1)  This section applies if an owner or owner's agent who lists personal information in a residential tenancy database becomes aware that the information is inaccurate, incomplete, ambiguous or out of date.

(2)  The owner or agent must, within 7 days, give written notice of the following to the database operator who keeps the database:

(a) if the information is inaccurate, incomplete or ambiguous –

(i) that the information is inaccurate, incomplete or ambiguous; and

(ii) how the information must be amended so that it is no longer inaccurate, incomplete or ambiguous;

(b) if the information is out of date, that the information is out of date and must be removed.

Penalty:  Fine not exceeding 50 penalty units.

(3)  The owner or agent must keep a copy of the written notice for one year after it was given under subsection (2) .

48ZB.     Ensuring quality of listing – database operator's obligation

(1)  This section applies if an owner or owner's agent who has listed personal information in a tenancy database gives the database operator who operates the database a written notice stating that the personal information must be –

(a) amended in a stated way to make it accurate, complete and unambiguous; or

(b) removed.

(2)  The database operator must amend the personal information in the stated way, or remove the personal information, within 14 days after the operator is given the written notice.

Penalty:  Fine not exceeding 50 penalty units.

48ZC.     Providing copy of personal information listed

(1)  An owner or owner's agent who lists personal information about a person in a residential tenancy database must, if asked in writing by the person, give the person a copy of the information within 14 days after the request is made.

Penalty:  Fine not exceeding 50 penalty units.

(2)  A database operator must, if asked in writing by a person whose personal information is in the residential tenancy database kept by the operator, give the person a copy of the information within 14 days after the request is made.

Penalty:  Fine not exceeding 50 penalty units.

(3)  If an owner or owner's agent charges a fee for giving personal information under subsection (1) , or a database operator charges a fee for giving personal information under subsection (2) , the subsection applies only if the fee has been paid.

(4)  An owner or owner's agent charging a fee for giving personal information under subsection (1) , or a database operator charging a fee for giving personal information under subsection (2) , must ensure that the fee –

(a) is not excessive; and

(b) applies to the giving of the information and not to the lodging of a request for the information.

Penalty:  Fine not exceeding 50 penalty units.

48ZD.   Notifying relevant non-parties of Commissioner order about listing

(1)  This section applies if –

(a) under section 48ZF , the Commissioner makes an order that a person must, in relation to a residential tenancy database –

(i) amend personal information in a stated way; or

(ii) remove all or particular personal information about a person; and

(b) the person against whom the order is made ( the relevant person ) is not a party to the proceeding for the dispute.

(2)  The Commissioner must ensure a copy of the order is given to the relevant person.

48ZE.     Keeping personal information listed

(1)  In this section –

national privacy principles means the principles stated in Schedule 3 of the Privacy Act 1988 of the Commonwealth.

(2)  A database operator must not keep personal information about a particular person in the operator's residential tenancy database for longer than –

(a) 3 years; or

(b) if, under the national privacy principles, the operator of the database is required to remove the personal information before the end of the 3-year period mentioned in paragraph (a) , the period ending when the information must be removed under the national privacy principles.

(3)  However, a database operator may keep the person's name in the operator's residential tenancy database for longer than the period stated in subsection (2)(a) or (b) if –

(a) other personal information about the person in the database is attached to the name; and

(b) the other personal information is not required to be removed under subsection (2) or another law.

(4)  This section does not limit the operation of another provision of these model provisions or a provision of another law that requires the removal of the personal information.

48ZF.     Civil proceedings to enforce compliance with Part

(1)  In this section –

eligible person means a person affected by information kept under this Part or a person authorised by such a person as a representative of the affected person.

(2)  An eligible person may apply to the Commissioner for an order under this section.

(3)  The Commissioner may make any order he or she thinks fit in respect of an application under subsection (2) if the Commissioner is satisfied that –

(a) personal information kept in the residential tenancy database is inaccurate, incomplete, ambiguous or out of date; or

(b) the inclusion of information that affects the eligible person is unjust in the circumstances, having regard to the following:

(i) the reason for the listing in the residential tenancy database;

(ii) the eligible person's, or the tenant's, involvement in any acts or omissions giving rise to the listing of the information in the residential tenancy database;

(iii) any adverse consequences suffered, or likely to be suffered by the eligible person because of the listing of the information in the residential tenancy database;

(iv) any other matter the Commissioner considers relevant.

(4)  The Commissioner may, by an order under this section, fix a period for compliance and impose any other requirements the Commissioner considers necessary or expedient for enforcement of the order.