Residential Property: Top 5 Data Protection Tips
The top 5 data protection considerations for those involved in the residential property and housing market, including landlords and managing agents
1. Get the basics right – including privacy notices
- Whether you are a landlord, a managing agent or another service provider, if you use, store or share personal data (including information relating to your tenants), you will very likely be subject to UK data protection law (primarily, the UK GDPR) as a data controller (for example, landlords in relation to tenant data they hold) or a data processor (for example, managing agents in relation to tenant data they hold on behalf of the landlord).
- For example, a landlord or managing agent may hold image data collected by their CCTV systems, contact details and financial data of their tenants or potentially biometric data or marketing preferences if technology enabled entrance systems or property management apps are used.
- Taking active steps to comply with the UK GDPR may be considered an expensive and daunting distraction. However, ignoring its requirements is a risky strategy.
- At the very least, basic compliance and security measures should be taken. Addressing certain ‘easy-win’ public facing compliance measures can go a long way to stave off unwanted scrutiny.
- Examples include: (a) ensuring that controllers have appropriate privacy notices drafted and made available and (b) ensuring that employees who have regular or permanent access to personal data are made aware of their responsibilities, including through appropriate training.
2. Use of CCTV
- CCTV may capture personal data of tenants, people visiting a property or those who work there. The use of CCTV in communal areas and publicly accessible areas (inside or outside) will likely be subject to the UK GDPR.
- As such, care should be taken to ensure that signs are clearly displayed to inform individuals that CCTV is in operation. Its use should then be explained in further detail in relevant privacy notices, including details of how the data will be recorded, used, stored and retained.
3. Subject access requests
- Related to the above point, individuals who want to exercise their right to access and receive a copy of their personal data can make a data subject access request (DSAR). The UK’s privacy regulator, the
- Information Commissioner’s Office (ICO) has published detailed guidance on the Right of access under Article 15 UK GDPR.
- If you are a data controller, you must comply with a DSAR without undue delay and, at the latest, within one month of receiving the request.
4. Security and data breaches
- If you are a data controller and discover a personal data breach, depending on the seriousness, you may be required to notify the ICO within 72 hours.
- You must describe the nature of the breach and, where possible, the categories and approximate number of individuals affected as well as the name and contact details of the Data Protection Officer (DPO) or other contact point for more information, the likely consequences and the measure taken or proposed and any measures to mitigate its adverse effects.
5. Data processing agreements
- If you are a data controller (for example, a landlord) who engages a data processor (for example, a managing agent), you will need a written contract covering a number of specific issues, including that the data processor will take appropriate measures to ensure the security of the personal data and act only in accordance with the data controller’s instructions. This is a legal requirement under the UK GDPR.
TL4 Fire Starters
Join us for a Festive FIRE Starters evening ahead of FIRE Starters Global Summit with our expert panellists.
Women in Chancery Christmas Celebration
Join us to celebrate the festive season and discuss the busy year we have had.
Charles Russell Speechlys advises Guildford Games Developer Community on the launch of Guildford.Games Ltd
Charles Russell Speechlys has advised the Guildford.Games committee, a not-for-profit initiative, on the formation of Guildford.Games Ltd
Alexia Egger Castillo
Inheritance contracts: An unknown planning tool for Brits with assets in Switzerland?
How you choose to dispose of your estate after death requires careful consideration, especially where assets are in multiple jurisdictions
FT Ignites Europe quotes William Garner on the FCA's approach to founder-led firms
"Taking a very strict line on founder-led firms risks undermining the FCA's competition mandate..."
Paula Boast is interviewed by Construction Week on Bahrain's construction industry and how it is moving towards more functional and responsible building
Dissecting Bahrain's construction practices
Part 1: The Tip of the Triangle – Examining London’s Potential in the Life Sciences Sector
HR Magazine quotes Nick Hurley on redundancy and employee rights
"Unfortunately the legal remedies for employees in companies that become insolvent are very limited"
Construction News quotes David Savage on the slight rise in construction output in September
"It remains to be seen how the sector reacted in October amid the political turmoil"
How final is a Final Certificate?
A recent Scottish case grappled with the complexities of a smash and grab adjudication.
HR Magazine quotes Nick Hawkins on a pregnancy discrimination case and what companies need to be mindful of
Pregnant worker given parenting tips before sacking wins tribunal case
Court of Appeal decides defective notice to quit not saved by 'Mannai' principles
The Court of Appeal handed down judgment in the second appeal in O G Thomas Amaethyddiath v Turner & Ors  EWCA Civ 1446.
Charles Russell Speechlys wins Best Legal Services: Private Equity – Pan – Africa at the AGF Service Providers Awards 2022
Best Legal Services: Private Equity – Pan – Africa at the AGF Service Providers Awards 2022
“Truss me, I quit!” - 5 Tips to Handle Unexpected Resignations and Post-employment Grievances
Read our guidance for employers on dealing with unexpected and “heat of the moment” resignations
Property Patter: Damages
Remedies are perhaps the main thing on a client’s mind when they start the process of litigation.
Sarah Jane Boon
The Independent quotes Sarah Jane Boon on the 9.6% divorce increase in 2021
ONS statistics - Divorces in England and Wales: 2021
JCT v NEC: Which contract is right for your project?
Unsure of what building contact to use. Learn the difference between NEC and JCT contracts with our guide.
Tristram van Lawick
Land Manager Collaboration for Environmental Delivery
Explore the different ways land managers can work together to engage with environmental markets.
Michael Powner and Ellen Roberts write for People Management on the benefits and drawbacks of novel compensation packages
The benefits and drawbacks of novel compensation packages
Henry Cuthbert writes for Law in Sport on Usain Bolt's move to trademark his legendary victory celebration
Trademarked For Success – What Can Athletes Learn From Usain Bolt’s Legendary Victory Celebration?