The Privacy Commissioner’s decision is important for protecting renters’ rights. It must be matched with legal reform.