Data protection (GDPR) for landlords

July 5, 2021
Category: Data Protection

Data protection course for landlords, letting agents and property managers for 2021

This course is essential for landlords, letting agents and property managers.

 General Data Protection Regulation (GDPR) for Landlords and Agents

The GDPR came into force on the 25th of May 2018.

Below is a brief overview of landlord and agent responsibilities under GDPR, but landlords and agents should audit their data protection procedures to ensure they are compliant. 

This guide concentrates on property management arrangements undertaken by landlords and agents regarding protecting tenants.

Introduction to GDPR (Regulation (EU) 2016/679) is a European Union (EU) comprehensive set of standard rules for the handling & storage of personal information within the EU. 

The regulation applies to anyone who is controlling the information of an EU citizen. This may be processing it on their behalf, even if the data controller is based outside of the EU.

The GDPR gives control back to citizens and residents over their data. GDPR has streamlined the regulatory environment by unifying the regulation within the EU. 

Although the UK is leaving the EU, the UK Government has confirmed that the GDPR will remain part of our legal system. 

The Information Commissioner’s Office is appointed authority to safeguard information rights and data privacy for individuals in the UK. This is intended to help individuals and organisations understand their rights and requirements under GDPR.

 How does GDPR affect landlords?

Landlords collect and handle the personal data of renters. This part of the letting process is classified in law as a data controller. 

Landlords & agents are required to ensure that their tenant and staff information is kept safe and secure. This should only be used for lawful purposes in compliance with GDPR.

Some landlords may employ contractors to assist them in running their letting businesses. 

An example would be an agent to carry out the letting and management activities on their property or work with other third-party companies. 

This may require tenant details during the course of a tenancy agreement (i.e. reference checks, credit checks). 

In these circumstances, it is essential to request evidence of the companies compliance procedure as to GDPR before instructing them.