NDAs for Real Estate Agencies: Off-Market Listings, Rent Roll Sales and Offshore Admin

Real estate agencies have particular reasons to use non-disclosure agreements, and they are not hard to work out. An agency now holds identity documents on both sides of every sale, a rent roll that is the most valuable thing it owns, and a vendor list full of people who have very good reasons for not wanting the neighbours to know they are selling. If any of it is shared with a contractor who has signed nothing, it is exposed.

Why the exposure grew

Brokering the sale, purchase or transfer of real estate is a designated service under the Anti-Money Laundering and Counter-Terrorism Financing Act. AUSTRAC’s guidance on real estate designated services makes a point that catches people out: when an agent acting for a seller brokers a successful sale, the customer is both the buyer and the seller, so the agency has obligations in relation to both parties. Check AUSTRAC’s real estate industry pages for the dates and enrolment steps that apply to your business, because they are published there and they change.

The knock-on effect is the one almost nobody has noticed. A small agency turning over $3 million or less would normally sit outside the Privacy Act. But the OAIC’s small business guidance lists the exceptions, and one of them is “a reporting entity for the purposes of the Anti-Money Laundering and Counter-Terrorism Financing Act 2006”. Another is “an operator of a residential tenancy database”. If either describes your agency, the Privacy Act applies to you regardless of turnover.

So the identity documents you are now collecting sit in a CRM that your offshore assistant logs into, and the privacy exemption you were relying on may no longer exist. A confidentiality agreement with everyone who touches that data is no longer a nice-to-have.

The five situations where an agency actually needs one

Off-market and pre-market campaigns. The vendor’s reason for selling is often the confidential part, not the price. Divorce, a deceased estate, a business in trouble, an owner who does not want staff or tenants to know. Anyone you show that property to before it is listed, including buyer’s agents and their clients, should be signing something first.

Selling a rent roll, or the agency itself. Due diligence means handing a competitor your landlord and tenant lists, management fee structures, and arrears history. If the deal collapses, they keep the knowledge. This is the single highest-value use of an NDA in the industry and the one most often done on a handshake because the buyer is someone you know.

Contractors and outsourced admin. Offshore virtual assistants, bookkeepers, CRM migration consultants, photographers and stylists who get address lists and access codes, copywriters who see the vendor’s circumstances. Each is a separate business you are handing data to.

Conjunctional and co-agency arrangements. You are sharing a buyer database with someone who is, in every other week of the year, your competitor.

Commercial leasing. Prospective tenants hand over financials, trading figures and guarantor details. They are entitled to expect those go no further than the assessment.

What the document has to cover

A one-page template pulled off the internet usually fails on the same points.

Define the confidential information specifically. “All information disclosed” is weak and courts read it down. Name the categories: the vendor’s identity and reason for sale, price expectations, the rent roll data, landlord and tenant contact details, management agreements, arrears and fee schedules.

Limit the purpose. This is the clause that does the real work. The information may be used only to evaluate this transaction, and for nothing else. Without it, a buyer’s agent who receives an off-market address has not technically breached anything by using it next month.

Name the permitted recipients and bind them. Your counterparty will need to show the information to their accountant, financier or lawyer. Say so, and make them responsible for those people keeping it confidential.

Carve out the disclosures you cannot prevent. Information already public, information they already held or independently developed, and anything required to be disclosed by law or to a regulator. That last one matters more than it used to: your confidentiality agreement must never sit in tension with your obligations as a reporting entity.

Set a term that matches the information. Deal-specific information might warrant two or three years. A landlord list is commercially sensitive for much longer. One term for everything is usually wrong in one direction or the other.

Deal with return and destruction. On request or when the deal ends, material is returned or destroyed, including copies held in email and cloud storage. Allow a carve-out for records they are legally required to retain, because otherwise you are asking them to promise something they cannot lawfully do.

Handle personal information explicitly. If you are passing across data about identifiable people, say how it must be stored, that it cannot be sent offshore without your agreement, and that they must tell you immediately if they lose control of it so you can meet your own obligations.

Be careful with non-solicitation. Agencies often bolt a clause onto the NDA preventing the other side from poaching staff or landlords. Restraints of that kind are read narrowly and are enforceable only to the extent they are reasonable. A clause drafted too wide can be struck out entirely, which leaves you with nothing. Keep it modest and specific.

Decide mutual or one-way. A rent roll sale is mutual, because the buyer discloses financial capacity. An offshore assistant is one-way. Sending a mutual agreement to a contractor looks like you have not read it.

What an NDA will not do

It does not stop the information moving. It gives you a contractual claim after it has. That claim is worth having, because it makes the obligation explicit and gives you a basis to seek an injunction quickly, but it is not a technical control. Restrict access as well as papering it.

It is also worth being honest about proof. If your vendor’s off-market campaign appears on a competitor’s database, showing where the leak came from is the hard part. The practical answer is to log who you sent what and when, so the trail exists before you need it.

And it is not a substitute for the other agreements. An NDA between your agency and a contractor is not a service agreement. It covers confidentiality, not scope, payment, insurance or intellectual property.

Getting one in place

If you already have a template and want to know whether it does what you think, that is a review rather than a new document. A contract and agreement review will tell you what your definition of confidential information actually captures and whether your carve-outs and term hold up. The general guide on when a business needs an NDA covers the basics, and there is a separate walkthrough of scope, term, carve-outs and return of materials if you want the clause-level detail. Agencies working through their AML/CTF obligations may also want the piece on AUSTRAC tranche 2 for real estate agents.

Claim Done is not a law firm and does not give legal advice. It takes the facts you provide, the parties, the information being disclosed and the purpose it can be used for, and produces a non-disclosure agreement drafted for that situation rather than a generic template. You review and approve the draft, and then it is sent by email. The non-disclosure agreement is a flat A$49, and every other price is on the pricing page.

If you need one now, the document that fits is the non-disclosure agreement. Start your document on Claim Done.

Frequently asked questions

Does a real estate agency really need an NDA for an offshore assistant?

If that assistant can see identity documents, landlord and tenant details or vendor circumstances, then a written confidentiality obligation is the minimum. It matters more now that many agencies are reporting entities under the AML/CTF Act, because the OAIC lists reporting entities as covered by the Privacy Act regardless of turnover. Pair the NDA with practical limits on what the assistant can access.

Should the NDA be mutual or one-way?

It depends on who is disclosing. A rent roll or agency sale is usually mutual, because the buyer reveals financial capacity and the seller reveals the business. A contractor, photographer or virtual assistant arrangement is one-way, since the information flows in a single direction. Sending a mutual agreement where only one side discloses signals that the document was not read.

How long should the confidentiality obligation last?

Match the term to the information rather than picking a round number. Details about a specific transaction lose sensitivity once the deal is public, while a landlord list stays commercially valuable for years. Using a single term for every category is usually wrong in one direction or the other, so consider splitting them.

Can an NDA stop me reporting something to a regulator?

Your agreement should include a carve-out for disclosures required by law or by a regulator, precisely so that no confidentiality obligation sits in tension with your obligations as a reporting entity.

What happens if someone breaches it?

You have a contractual claim, and a clearly drafted agreement gives you a basis to seek an urgent order stopping further use. The practical difficulty is usually proof, since showing where a leak originated is harder than showing that one occurred. Keep a record of who received what and when, so the trail exists before you need it.