As a tenant in England, your personal information — from ID documents and references to contact details and rent payment records — is protected under data protection law. This guide explains what data landlords and agents can lawfully collect, when they must obtain consent or rely on a legitimate interest, and how renters can ask to view, correct, or erase their information. It also covers practical situations like referencing checks, managing deposit records, and notices about property access or surveillance cameras. If you worry about misuse or unclear data handling, the steps here show how to make subject access requests, complain to the Information Commissioner’s Office, or raise concerns with the First-tier Tribunal (Property Chamber).
What data landlords and agents may collect
Landlords and letting agents typically gather information needed to set up and manage a tenancy. That can include identity documents, references, emergency contact details, and payment records. They should only collect what is necessary for a clear purpose and keep it secure.
- ID documents and referencing reports (photos of passports, utility bills used to confirm identity).
- Contact details for tenants and emergency contacts.
- Rent payment records, bank details used for direct debit set-up, and deposit information.
- Copies of tenancy agreements, notices, and other tenancy-related forms.
- Inventory photos and condition reports taken at move-in and move-out.
Your rights under data protection law
Tenants have several rights when it comes to their personal data: to access what is held, ask for incorrect data to be corrected, request erasure in certain circumstances, restrict processing, and object to particular uses. To exercise these rights you usually contact the data controller (the landlord or agent) directly. For subject access requests and guidance from the regulator, see official ICO pages.[1]
- Request access to your data (a subject access request).
- Ask for incorrect information to be corrected or updated.
- Request erasure in limited situations where processing is unlawful or unnecessary.
- Object to processing for direct marketing or where legitimate interests are asserted without good reason.
Common tenant situations and what to do
Referencing checks and credit information
Referencing companies and agencies may process your data. You can ask which data they hold and where it came from. If a referencing decision harms your ability to rent, you can request correction or raise a complaint with the ICO.[2]
Surveillance, CCTV and landlord entry
Landlords can use CCTV in communal areas for safety but must be transparent about its use and ensure images are stored securely. Notices about surveillance and clear retention periods help show lawful processing. If a landlord intends to install cameras that record private areas, raise your concern in writing and ask for the lawful basis for processing.
Notices, possession proceedings and tenant data
When landlords serve tenancy-related notices or start possession proceedings they will rely on tenancy records and payment histories. If you need to challenge data used in a dispute, obtain copies via a subject access request and consider raising related disputes with the First-tier Tribunal (Property Chamber).[3]
Practical steps: making requests, complaints and using the tribunal
Follow clear steps when you want to see or correct your data, or if you think it has been misused. Start by writing to the landlord or agent, use the ICO for guidance and complaints, and if necessary apply to the First-tier Tribunal (Property Chamber) for related tenancy disputes.
- Make a clear written request to the landlord or agent detailing what you want (access, correction, erasure).
- Keep copies of identity documents you provide and any responses you receive.
- Contact the ICO for guidance or to make a complaint if the controller fails to respond properly.[2]
- If data issues tie into a tenancy dispute, consider applying to the First-tier Tribunal (Property Chamber) for a determination.[3]
FAQ
- Can my landlord share my details with contractors or other tenants?
- Landlords may share limited contact details with contractors for repairs or with utility providers when necessary, but they should not share more personal data than required and must have a lawful basis.
- How long should my landlord keep tenancy records?
- Retention should be as short as necessary for the purpose; specific times vary by purpose (for example, financial records are kept longer for tax reasons), and you can ask the controller to explain retention policies.
- How quickly must a landlord respond to a subject access request?
- Controllers normally must respond without undue delay and at the latest within one month of receiving your request, with some scope to extend in complex cases.
How-To
- Identify the data controller (your landlord or letting agent) and find a contact email or address.
- Write a clear request stating you are making a subject access request and specify the data you want.
- Attach proof of identity if requested and keep a copy of your sent request and any ID supplied.
- Allow up to one month for a response; if the request is complex the controller should inform you of any extension.
- If the controller does not comply, contact the ICO for advice and to submit a complaint.
- If the issue affects a tenancy dispute, consider gathering evidence and applying to the First-tier Tribunal (Property Chamber).
Key Takeaways
- You can ask to see and correct data landlords hold about you.
- Make requests in writing, keep records, and contact the ICO for help.
- If data problems relate to a tenancy dispute, the First-tier Tribunal (Property Chamber) can hear related matters.
Help and Support / Resources
- ICO: How to make a subject access request
- ICO: Make a complaint
- First-tier Tribunal (Property Chamber) information
