Skip to content

Security & Licensing for Australian Property Managers and Landlords: What You Need to Know in 2026

By Rick Campbell · 16 September 2026

Navigating security obligations and licensing requirements is essential for every Australian property manager and landlord. Here's the complete guide.

Quick Answer: Australian property managers face strict state-by-state licensing rules in 2026, with fines up to $110,000 for corporations operating without a valid licence in NSW.

Why Security and Licensing Matter More Than Ever in Australian Property

Whether you're managing a rental in Fitzroy, selling off the plan in Parramatta, or running a short-stay operation in Noosa, security obligations and licensing requirements now sit at the centre of day-to-day property work. In 2026, tighter rules across every state and territory mean ignorance is no longer a viable defence. Financial penalties for non-compliance can be severe, and regulators are actively enforcing them.

From real estate agent licensing to residential tenancy security deposit rules, property managers and landlords face a layered web of obligations. This guide breaks down the key requirements, explains what's changed recently, and helps you stay on the right side of the law. We've also flagged where property managers most often get caught out, based on recent regulator reports and compliance data.

Real Estate Agent Licensing: State-by-State Essentials

In Australia, real estate licensing is governed at the state and territory level. There is no single national licence. Each jurisdiction sets its own training requirements, renewal periods, and continuing professional development (CPD) obligations.

New South Wales

In NSW, anyone who carries on the business of a real estate agent or acts as a licensee-in-charge must hold a licence issued under the Property and Stock Agents Act 2002. As of 2026, NSW Fair Trading requires Class 1 licence holders to complete a minimum of 12 CPD hours annually. This includes mandatory units covering trust accounting and consumer protection. Class 2 certificate holders — typically employed agents — must complete at least 9 CPD hours per year. Fines for operating without a valid licence can reach $22,000 for individuals and $110,000 for corporations.

Victoria

Victoria's Estate Agents Act 1980 and the more recent Residential Tenancies Act 1997 amendments continue to shape licensing in the state. Consumer Affairs Victoria administers agent licensing. The Rental Minimum Standards framework has added compliance obligations that directly affect how licensed agents manage properties. Agents in Melbourne suburbs like Richmond, Prahran, and Brunswick must ensure rental properties meet specific security standards before a tenancy starts, or they risk potential liability.

Queensland

The Property Occupations Act 2014 governs real estate licensing in Queensland. The Queensland Office of Fair Trading requires real estate agents to hold either a full real estate agent licence or a registration certificate. Since early 2026, updated CPD requirements mean all licence holders must complete modules on cybersecurity in property transactions. This responds to a sharp rise in property-related fraud across Brisbane, the Gold Coast, and Cairns over the past few years.

Western Australia, South Australia, and the ACT

Each of these jurisdictions maintains its own licensing regime. In WA, Consumer Protection administers the Real Estate and Business Agents Act 1978. South Australia operates under the Land Agents Act 1994, while the ACT uses the Agents Act 2003. All three require annual licence renewals. Each also imposes trust account auditing obligations that carry significant penalties for non-compliance.

Across all jurisdictions, regulators have also started cross-checking licence records against property management software logins and trust account software, making it easier to flag agents operating under lapsed or suspended licences. Property managers should treat licence renewal dates with the same urgency as bond lodgement deadlines, since both are now subject to closer digital scrutiny in 2026.

Security Deposits and Bond Obligations

One of the most misunderstood areas of property management compliance involves residential security deposits, commonly called bonds. The rules on how bonds are collected, held, and paid out differ across states. Getting it wrong can expose property managers to serious legal and financial consequences.

How Bond Lodgement Works

In most Australian states, bonds must be lodged with a government-administered authority within a set timeframe after collection. These include:

  • NSW: NSW Fair Trading — bond must be lodged within 10 business days of receipt
  • Victoria: Residential Tenancies Bond Authority (RTBA) — lodgement required within 10 business days
  • Queensland: Residential Tenancies Authority (RTA) — lodgement required within 10 days of receipt
  • Western Australia: Bond Administrator — lodgement required within 14 days
  • South Australia: Consumer and Business Services — within 7 days of receipt

Failure to lodge bonds on time remains one of the most common compliance breaches recorded by state regulators. In 2025, the RTA in Queensland processed over 340,000 bond lodgements and issued formal warnings or fines in roughly 2,100 cases where agents missed lodgement deadlines. Early indications for 2026 suggest this figure is tracking similarly, as more agencies move to digital bond lodgement systems that flag late submissions automatically.

Bond Limits

Bond amounts are capped by legislation in most jurisdictions. In NSW, the maximum bond for a property renting above $900 per week is uncapped. For properties below that threshold, the cap is four weeks' rent. In Victoria, the maximum is one month's rent. Understanding these caps, and never collecting more than what's permitted, is a core licensing obligation for every property manager.

Physical Security Standards for Rental Properties

Beyond financial and licensing obligations, property managers and landlords have a duty to make sure rental premises meet minimum physical security standards. These standards have been strengthened significantly across Australia since 2021 and continue to evolve.

Locks and Entry Points

Victorian rental minimum standards, which came into full effect in March 2021 and were updated again in 2025, require all external doors to have deadlatches or deadlocks. All ground-floor windows must have functioning latches. Properties in inner-city suburbs like Collingwood, St Kilda, and Footscray built before 1990 have proven particularly hard for landlords to bring up to standard. Some owners report spending between $1,500 and $4,000 per property on lock upgrades alone.

In Queensland, the minimum housing standards introduced under the Residential Tenancies and Rooming Accommodation Act 2008 amendments require all entry doors to have a functioning lock or latch that can be opened from inside without a key. Sliding doors must have a secondary locking device.

Smoke Alarms and Security Interconnection

Smoke alarms are technically a safety rather than a security matter. But their integration with modern home security systems has created a compliance overlap that property managers need to understand. Queensland's photoelectric smoke alarm laws, among the strictest in the country, require interconnected alarms in all bedrooms and hallways for properties sold or leased from 1 January 2022. By 2027, all Queensland dwellings must comply regardless of tenancy status, so property managers planning 2026 maintenance budgets should factor in upgrade costs now rather than waiting until the deadline year.

Cybersecurity and Digital Licensing in Property Transactions

The digitisation of property transactions has introduced an entirely new category of security risk. In 2025, the Australian Cyber Security Centre (ACSC) reported that real estate was among the top five industries targeted by business email compromise (BEC) scams, with losses in the sector exceeding $47 million nationally. The typical attack involves fraudsters intercepting email communications between agents, conveyancers, and buyers to redirect settlement funds.

Heading into 2026, this threat has not slowed down. Industry reports suggest scammers are now using AI tools to write more convincing fake emails. These messages copy the tone and format of real agents and conveyancers, making them harder to spot at a glance. Property managers who handle rent payments, bond transfers, and trust account funds remain a high-value target.

Digital Verification Obligations

From mid-2026, the Australian Transaction Reports and Analysis Centre (AUSTRAC) has strengthened its guidance for real estate agents under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006. Agents are now required to conduct enhanced customer due diligence for high-value transactions, including digital identity verification for buyers and sellers in transactions above $10,000. Non-compliance can result in civil penalties exceeding $18 million for corporations.

This shift means agencies need clear digital identity checks built into their everyday workflow, not just for large sales. Many property management platforms now offer built-in ID verification tools. These help agents meet AUSTRAC requirements without adding extra admin time to each transaction.

Secure Communication Practices

Industry bodies including the Real Estate Institute of Australia (REIA) and state-based REIs have published updated guidelines recommending that agents:

  • Use encrypted email platforms for all financial communications
  • Implement two-factor authentication across all property management software
  • Verbally confirm bank account details with clients before any fund transfer
  • Conduct annual cybersecurity training for all staff
  • Maintain cyber liability insurance as part of their professional indemnity coverage
  • Review third-party software access and remove unused logins every quarter

Agencies that treat these steps as a one-off checklist often fall behind. Cyber risks change fast, and scam tactics from even a year ago may no longer trigger the same warning signs in staff. A short, repeated training routine works better than a single annual session for keeping teams alert to new BEC tricks.

Short-Stay Accommodation Licensing and Security

The rapid growth of short-stay platforms like Airbnb and Stayz has created a distinct licensing and security challenge, particularly in high-demand markets like Byron Bay, Lorne, and the Mornington Peninsula. Several councils have introduced local laws requiring short-stay operators to register their properties, pay annual fees, and meet specific security standards including CCTV requirements and noise management plans.

In NSW, the Fair Trading Amendment (Short-term Rental Accommodation) Act 2018 created a mandatory Code of Conduct. Hosts who receive three strikes under the code face a five-year ban from operating short-stay accommodation. As of 2026, Fair Trading figures show over 1,200 properties across NSW have faced complaints under the code, with 47 hosts receiving bans. Property managers handling short-stay portfolios should check current enforcement data directly with Fair Trading, as these numbers continue to rise each year.

Other states run similar schemes with their own rules. Victoria's short-stay laws focus on owners corporations and allow them to ban or restrict short-term letting in some buildings. Queensland councils, especially on the Gold Coast and in Noosa, use planning schemes to control short-stay use in residential zones. Property managers working across state lines need to track each jurisdiction separately, since a single national standard still doesn't exist.

Security expectations for short-stay properties have also shifted. Many platforms and councils now expect hosts to use smart locks or keyless entry systems instead of physical key handovers. This cuts the risk of lost or copied keys and gives managers a clear log of who entered a property and when. Pairing this with exterior CCTV at entry points helps meet both insurance requirements and local council conditions.

Smoke alarm compliance is another area regulators are watching closely. Short-stay properties often fall under the same interconnected smoke alarm rules as long-term rentals, but with added pressure because guests are unfamiliar with the building layout. Property managers should treat smoke alarm checks as part of every changeover, not just an annual task.

Given how fast short-stay rules are changing, many property managers now build a simple compliance checklist covering registration status, CCTV placement, noise monitoring, and alarm testing for each listing. A documented, repeatable checklist like this is a practical way to show councils and insurers that a property is managed to a consistent standard, and it reduces the chance of a compliance gap going unnoticed during busy peak seasons.

Strata and Community Title Security Obligations

For properties within strata schemes — which account for a significant proportion of housing in Sydney's CBD, Melbourne's Docklands, and Brisbane's South Bank — security obligations are shared between the owners corporation and individual lot owners. The owners corporation is typically responsible for securing common areas, entrances, and car parks, while individual owners must maintain security within their lots.

Strata managers in NSW must be licensed under the Property and Stock Agents Act 2002 and are subject to the same CPD requirements as real estate agents. The NSW Government's strata reforms, progressively implemented since 2016 and updated again in 2025, include provisions requiring owners corporations to maintain a ten-year capital works fund that accounts for security infrastructure upgrades.

Staying Compliant: Practical Steps for 2026

Given the complexity and pace of change in this space, here are the most important practical steps for property managers and landlords operating in 2026:

  • Audit your licence status: Confirm your licence is current, that your CPD hours are up to date, and that your trust account audits are scheduled for the required period.
  • Review physical security: Walk through every managed property and assess it against the minimum standards applicable in your state. Document any upgrades required and communicate them to landlords in writing.
  • Update your digital security protocols: Implement two-factor authentication, review your email security settings, and ensure all staff have completed cybersecurity awareness training.
  • Check bond lodgement records: Run a reconciliation of all bonds held against lodgements recorded with your state authority. Any discrepancies should be rectified immediately.
  • Consult your state REI: Each state Real Estate Institute publishes updated compliance guides and offers member support services. These are among the most practical resources available for staying current.

The Cost of Getting It Wrong

The financial and reputational cost of non-compliance in the property sector is substantial. Beyond the direct fines — which in some states can reach six figures for corporations — agents who breach licensing obligations can face suspension or permanent cancellation of their licence. In a competitive market where reputation is everything, the long-term damage to client relationships and referral networks can far exceed any immediate penalty.

In 2025, Consumer Affairs Victoria took action against 23 real estate agents for trust account irregularities, resulting in combined penalties of over $1.3 million. In Queensland, the Office of Fair Trading prosecuted 11 agents for operating without a valid licence, with individual fines ranging from $3,500 to $18,000.

Security and licensing compliance isn't just about avoiding penalties — it's about building the kind of professional practice that clients trust and competitors respect. In 2026, that distinction matters more than ever.

Keep reading

More from Sentinel Bridge: