Reading the 2Apply privacy determination carefully

The source document is IRE [2026] AICmr 24, an OAIC determination. This article reads the selected findings and orders from that document alongside the review caveat in current OAIC APP 3 guidance.

The OAIC determination found that IRE interfered with privacy through 2Apply collection between March 2020 and 18 March 2025, breaching APP 3.2 and APP 3.5.

IRE Pty Ltd (Privacy) [2026] AICmr 24 (1 April 2026) · Checked 2026-10-10

The identified conduct period belongs with the finding. It should not be expanded into a statement about every collection practice, every application provider or an applicant's present circumstances.

Current OAIC APP 3 guidance says the IRE determination is under review in the Administrative Review Tribunal and that relevant IRE positions are not settled.

Chapter 3: APP 3: Collection of solicited personal information · Checked 2026-10-10

The finding and that caveat should be read together. Reporting what the determination found is different from describing an uncontested final position. The current review status does not permit this article to predict what the Tribunal will decide.

It also does not establish the experience of an individual applicant. A source-backed account can explain the selected determination without turning it into a personal remedy or a verdict on another organisation.

The determination ordered IRE to cease the specified collection within 60 days of the determination.

IRE Pty Ltd (Privacy) [2026] AICmr 24 (1 April 2026) · Checked 2026-10-10

The determination ordered IRE to engage an independent reviewer at its own expense within 60 days.

IRE Pty Ltd (Privacy) [2026] AICmr 24 (1 April 2026) · Checked 2026-10-10

These are instructions in the determination. They do not, by themselves, prove that collection ceased, that the independent work finished or that a platform was certified. This article supplies no fine, shutdown or completed-remediation claim.

The conduct period, an order's required action period and the status of a later review are different parts of the account. Combining them can create an inaccurate impression that a deadline proves a completed event.

The review caveat reported here comes from guidance checked on 10 October 2026. A future reader should consult the linked primary sources for later developments. This article does not infer an outcome from elapsed time or treat an order as a compliance receipt.

For organisations covered by APP 3, collection of non-sensitive personal information must be reasonably necessary for their functions or activities.

Chapter 3: APP 3: Collection of solicited personal information · Checked 2026-10-10

The linked APP 3 explanation discusses that general collection principle separately. Its coverage limits still matter. The applicant privacy checklist addresses the distinct task of reviewing the material in an outgoing file.

Neither this determination nor a supporting profile replaces a recipient's required application process. No claim is made that a document product resolves the findings, changes the review outcome or removes the need to understand the recipient's request.

Create a personal rental profile, delivered as a shareable PDF, to complement the process required by the agent or landlord.

RentFiles helps organise the file; the agent or landlord decides the application outcome.

Source attribution: Office of the Australian Information Commissioner website: www.oaic.gov.au; © Commonwealth of Australia. CC BY 4.0. Licence: https://www.oaic.gov.au/about-the-OAIC/copyright.