At some point, most small businesses need an application form.
You might be hiring, taking on new clients, onboarding contractors, running a membership program, accepting wholesalers, or even collecting applications for a competition or community initiative. In all of these cases, your application form becomes more than “just admin” - it’s a legal and commercial document that can expose you to risk if it’s unclear, too intrusive, or missing key disclosures.
The good news is: you don’t need to overcomplicate it. With the right structure (and a few key legal checks), you can build an application form that helps you screen applicants, collect the information you actually need, and stay compliant with Australian laws.
Below, we’ll walk you through what to include, what to avoid, and how to set your form up so it supports your business - not creates problems later.
Note: this article is general information only and isn’t legal advice. Your obligations can vary depending on your industry, the type of application, and where you operate in Australia.
An application form is any document (paper or digital) where a person applies to do something with your business. Common examples include:
- Job application forms (for employees or casual staff)
- Contractor application forms (e.g. subcontractors, creatives, drivers)
- Customer application forms (e.g. credit accounts, memberships, onboarding forms)
- Supplier/wholesale application forms (e.g. reseller accounts)
- Service intake forms (e.g. health, consulting, coaching, professional services)
Legally, the form matters because it usually involves at least one (and often several) of the following:
- Collecting personal information (privacy obligations)
- Making representations about what you offer and what applicants can expect (consumer law risk)
- Filtering or rejecting applicants (anti-discrimination and workplace laws risk, especially for hiring)
- Creating a record that may later be used in a dispute (e.g. “you said X” / “you agreed to Y”)
Think of it this way: your application form is often the first “formal” touchpoint in the relationship. If it’s vague, inconsistent, or asks for the wrong things, you can end up with onboarding issues, complaints, or claims you didn’t expect.
Before you write a single question, get clear on why you’re collecting information. This sounds obvious, but it’s where many businesses go wrong.
Start by deciding:
- What is the application for? (employment, contractor onboarding, credit account, membership, etc.)
- What decision will you make using this information? (shortlisting, eligibility check, service matching, risk assessment)
- What information do you genuinely need? (not “nice to have”)
- Who will see the information? (HR, managers, admin, third-party platforms)
- How long do you need to keep it? (and when will you delete it?)
This “purpose first” approach is particularly important for privacy compliance. If you collect unnecessary details “just in case”, you may be collecting personal information you can’t justify later.
If your application is linked to engagement (for example, hiring staff or contractors), it can also be worth thinking about what other documents need to follow the application stage, such as an Employment Contract or a contractor agreement.
While every business is different, a legally safer application form usually has a few predictable sections.
1. Applicant Details (Only What You Need)
Most application forms will ask for basics like name, phone number, email address, and address. That’s fine - just be careful not to over-collect.
For example, you may not need:
- date of birth (unless there’s a genuine reason, such as confirming minimum age for work)
- passport details (unless you actually need it for the next step)
- health information (unless you’re dealing with a service where this is required and you have the right privacy controls)
2. Eligibility Questions (If Applicable)
If applicants must meet certain criteria, list that clearly. This reduces back-and-forth and makes your decision-making easier to justify.
Examples might include:
- industry licences or certifications
- availability (for rostering)
- right to work in Australia (for employees)
- minimum business requirements (for wholesale accounts)
Tip: word eligibility questions carefully so they don’t drift into discriminatory territory. If you’re unsure, it’s better to keep questions objective and role-related.
3. Supporting Documents
If you need supporting documents, explain what you’ll accept and how it will be used (and stored). For example:
- resume/CV
- portfolio
- copies of relevant qualifications
- insurance certificates (common for contractors)
Keep in mind: attachments are often where sensitive personal information ends up, even if you didn’t ask for it explicitly.
4. Declarations And Consents
This is one of the most important parts of a compliant application form, and it’s often missing.
Depending on the type of application, declarations and consents can cover things like:
- the information provided is true and correct
- the applicant understands the application does not guarantee acceptance
- consent to contact referees
- consent to background checks (where lawful and relevant)
- consent to collect and use personal information as stated
If you collect personal information, this section should align with your Privacy Policy (and any collection notice you use).
5. Next Steps And Timeframes
Be upfront about what happens after submission. For example:
- how long the review process usually takes
- whether you respond to unsuccessful applicants
- what the next stage involves (interview, onboarding call, deposit/payment, contract issue)
This is not only good customer service - it can reduce complaints and misunderstandings.
Step 3: Get The “Legal Risk” Areas Right (Privacy, Discrimination, And Consumer Law)
Most legal issues with an application form come down to three areas: privacy, discrimination, and misleading conduct. Let’s break those down in plain English.
If your application form collects information that can identify someone (even something as simple as a name and email address), you’re collecting personal information.
Practical privacy steps for a compliant application form include:
- Only collect what you need for the purpose of the application.
- Tell applicants what you’re doing with their information (what you collect, why, who you share it with, and how they can access it).
- Store it securely (especially if you’re collecting resumes, ID documents, or sensitive details).
- Set a retention approach - for example, deleting unsuccessful applicant data after a reasonable period, unless you need it for a lawful reason.
Depending on your business size and how you handle personal information, you may also need to provide a privacy collection notice (and, in many cases, have a compliant Privacy Policy). If you’re running an online form, your privacy approach should also work alongside your website terms, such as Website Terms & Conditions, particularly if users create accounts or submit information through your site.
Discrimination: Keep Questions Relevant And Fair
If your application form is used for hiring (or any selection process), you need to be careful that your questions don’t unlawfully discriminate.
As a general rule, focus on questions that are:
- directly related to the role (or the opportunity), and
- objectively measurable (skills, experience, licences, availability)
Questions about personal attributes that aren’t required for the role can create risk - even if you didn’t mean anything by them.
If you do need to ask something potentially sensitive (for example, because it relates to the genuine requirements of the role and you can lawfully ask), it’s worth getting advice on how to word it and how to handle responses.
Application forms aren’t always “consumer-facing”, but they often contain statements about your process, fees, eligibility, timeframes, and outcomes.
If those statements are inaccurate or exaggerated, you can create issues under the Australian Consumer Law (ACL), including misleading or deceptive conduct.
Simple examples include:
- saying an applicant “will” be approved when approval is discretionary
- implying a person has secured a job or placement when they haven’t
- not clearly disclosing fees, deposits, or ongoing charges
If your application process is part of selling goods or services, it’s smart to align the wording with your broader customer terms and refund approach. For many businesses, that means ensuring the application stage doesn’t contradict your policies around cancellations, deposits, and refunds.
Step 4: Add The Right Attachments And “Follow-On” Documents
Your application form is rarely the only document you need. In many cases, the form is simply the gateway into a larger legal relationship.
Here are common “next documents” that often sit behind an application form:
- Customer Terms & Conditions (especially if acceptance creates an ongoing service relationship)
- Credit terms or payment terms (if you’re approving trade accounts or invoicing)
- Contractor agreement (if the applicant will perform services for you)
- Employment documentation (if the applicant is being hired)
- Privacy and website documents (if the form is online)
For example, if your form is used to hire staff, you’ll typically want a proper Employment Contract ready to go once you make an offer, so you can clearly set expectations around duties, pay, confidentiality and termination.
If your form is part of onboarding customers to an online platform, your broader legal framework often includes Website Terms & Conditions and a Privacy Policy, so the application process doesn’t exist in a legal vacuum.
And if you’re collecting confidential business information during an application stage (for example, a wholesale applicant disclosing supplier lists, or a potential partner disclosing sensitive plans), an NDA may be appropriate. In many businesses, that’s where a Non-Disclosure Agreement can help set boundaries early.
Legal compliance isn’t just about what you say - it’s also about how you run the process day-to-day.
Online forms are fast and scalable, but they also tend to:
- collect more data than intended (because fields become “standard”)
- create privacy risks if data is stored in multiple systems
- make it easier for staff to forward applications informally (e.g. email chains)
Paper forms can feel simpler, but they create storage and security issues if they’re left in open areas or scanned inconsistently.
Whatever format you use, make sure you can answer these questions:
- Where is the information stored?
- Who has access?
- How do you correct errors if the applicant asks?
- When do you delete it?
Do You Need An E-Signature Or Checkbox Consent?
Many businesses use a checkbox that says something like “I confirm the information is correct and I agree to the privacy collection statement.”
This can work well, as long as it’s clear what the applicant is agreeing to and you can keep records showing what was agreed to. Whether you need an e-signature, a checkbox, or additional steps can depend on the type of application, the platform you use, and any laws or industry rules that apply (for example, if you’re seeking consent for background checks or collecting sensitive information).
Keep the wording simple, and avoid bundling unrelated consents together (for example, privacy consent plus marketing consent plus agreement to future terms) unless you’re confident it’s appropriate for your business model.
Keep A Clean Audit Trail
If there’s ever a dispute (for example, an applicant claims they were promised something, or a customer claims they weren’t told about a fee), good records matter.
Make sure your process can show:
- the version of the application form used at the time
- the applicant’s responses
- any disclosures or consents accepted
- follow-up communications (approval, rejection, next steps)
This is especially helpful for growing businesses where multiple team members process applications.
Key Takeaways
- An application form is often a legal document in practice because it collects personal information, shapes expectations, and creates a written record.
- Start by defining the purpose of your application form so you only collect the information you actually need and can justify why you’re collecting it.
- Most compliant application forms include clear applicant details, eligibility questions, document uploads, declarations/consents, and an explanation of next steps.
- Common legal risk areas include privacy compliance, avoiding discriminatory questions (especially for hiring), and making sure your wording doesn’t mislead applicants.
- Your application form should align with your other documents like a Privacy Policy, Website Terms & Conditions, and any employment or contractor agreements you use.
- Good admin matters: store applications securely, limit access, keep version control, and maintain a clear audit trail of what was submitted and agreed to.
If you’d like help setting up a legally compliant application form (and the contracts and policies that sit behind it), you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.
