Data Protection Documents for Residential Landlords
What Are a Landlord’s Responsibilities Under Data Protection Laws?
Landlords in the UK must comply with the UK GDPR and the Data Protection Act 2018. These laws give tenants rights over how their personal data is collected, stored or used.
As a landlord, you are a “data controller”, which means you are responsible for managing tenant information lawfully. Tenants, guarantors, and residents are considered “data subjects” and have legal rights over their data.
The Data Protection Guidance Notes for Landlords explains the workings of data protection legislation in more detail. The Data Audit Checklist for Landlords can be used to assess how data is collected and sed. The outcome of the Data Audit will help landlords to prepare a Privacy Notice which can be downloaded from the list of documents below. These templates should be provided to tenants, residents and guarantors whose data the landlord holds.
More Data Protection Support Documents
For commercial landlords explore the extensive range of documents which can be accessed here: Data Protection Compliance for Commercial Landlords
For letting agents, templates are available here: Data Protection Documents for Residential Lettings Agents
You can explore the full range of ready to use tenant referencing templates in the list below:
Data Protection Documents for Residential Landlords is part of Property. Just £38.50 + VAT provides unlimited downloads from Property for 1 year.
Frequently Asked Questions
Yes. If you collect information about tenants, guarantors or other occupiers you are a data controller under the UK GDPR and the Data Protection Act 2018. That applies even to a single property. You must have a lawful basis to hold the data, keep it secure, use it only for letting purposes and not keep it longer than you need.
Landlords should only collect and retain personal information that is necessary for managing the tenancy. This may include identity and contact details, referencing information, the tenancy agreement, deposit records and right to rent evidence. Information should only be kept for as long as there is a legitimate reason to retain it, taking into account legal, regulatory and business requirements. Right to rent records must be retained for the period required by Home Office guidance.
Yes. You must tell people whose data you hold what you collect, why, your lawful basis, who you share it with and how long you keep it. A privacy notice does this. Give it to tenants, guarantors and other occupiers at the start. A data audit first helps you map what you hold so the privacy notice is accurate.
A tenant requesting access to their personal information is making a Subject Access Request (SAR). Landlords must usually respond within one month and provide a copy of the personal data they hold about the tenant, normally free of charge. You should review the information before providing it and may need to withhold or redact limited information, such as personal data relating to another individual or information covered by a legal exemption. Subject Access Requests should be handled promptly and properly, as failure to comply ay result in a complaint to the Information Commissioner's Office (ICO) or enforcement action.