Tenant personal data (UK GDPR)
What the law expects
- As a landlord you decide why and how tenants’ personal data is used, which makes you responsible for it under UK GDPR.
- Collect only what you need, keep it secure, and keep it no longer than necessary.
- Tenants can ask for a copy of the data you hold about them, and you must respond within a month.
- Most landlords who hold tenants’ personal data need to pay the ICO data protection fee; the ICO has a short self-assessment.
Where landlords often fall short
Passport scans, payslips and references sitting in email, phones and shared folders, with no plan for when they are deleted.
How iPO Hub helps: Tenant data & GDPR →