Data Protection Rights for Scottish Renters

Understanding how your personal information is collected and used helps you protect your privacy as a tenant. This guide explains data protection rights for renters in Scotland, in plain language, and shows how to view what landlords hold about you, ask for corrections, and challenge unlawful processing. It covers when landlords can share data, how to make a subject access request, and the official routes to complain if your rights are breached. Practical examples and the names of the key laws and bodies are included so you can act confidently if you face surveillance, unnecessary record-keeping, or privacy concerns during your tenancy.

Who is responsible for your data?

Your landlord (or letting agent) is usually the data controller for information about your tenancy. The same data protection rules under the UK GDPR and the Data Protection Act 2018 apply across Scotland alongside tenancy-specific law such as the Private Housing (Tenancies) (Scotland) Act 2016. Controllers must have a lawful basis to collect and keep personal data and must handle it fairly and transparently.

Your rights under data protection

• Request access to personal records your landlord holds.
• Submit a correction form if information about you is wrong.
• Object to unnecessary sharing or processing of your personal data.

Official forms and when to use them

Subject access request (ICO guidance)

A subject access request (SAR) asks a landlord or agent to provide the personal data they hold about you and an explanation of how it is used. Use the ICO guidance and template to structure the request: Make a subject access request^[1]. Practical example: email your landlord a dated SAR listing the records you want (emails, tenant file, CCTV clips) and attach ID copies if asked.

Make a complaint to the ICO

If a landlord ignores a SAR, refuses correction without good reason, or processes data unlawfully, you can complain to the Information Commissioner. Use the ICO complaints route: Make a complaint to the ICO^[2]. Practical example: after a landlord fails to delete wrongly shared data, submit a complaint and include evidence of your request and the landlord's response.

Apply to the First-tier Tribunal for Scotland (Housing and Property Chamber)

For disputes where unlawful data use impacts possession, harassment or other tenancy issues you may apply to the First-tier Tribunal for Scotland (Housing and Property Chamber). See the tribunal's site for application forms and guidance: Housing and Property Chamber^[3]. Practical example: if a landlord relies on incorrect records in a notice to evict, you can include data protection arguments in a tribunal application.

Entry, surveillance and landlord records

Landlords can take reasonable steps to protect property but any surveillance or record-keeping must respect your privacy and have a lawful basis. CCTV covering communal areas may be lawful if it is proportionate and notices are displayed, but hidden audio recording or intrusive monitoring inside homes is likely unlawful. Check your tenancy agreement for how data is handled, ask for details of cameras or logs, and request copies of recordings where appropriate.

Complaints and remedies

Start by raising the issue with your landlord in writing and keep copies. If the response is unsatisfactory, use the ICO complaint route and keep evidence of your SARs and correspondence. If the data issue affects your tenancy rights (for example, wrong records used in possession proceedings), consider applying to the Housing and Property Chamber for a resolution. Time limits for tribunal actions vary, so act promptly.

FAQ

Can my landlord record visitors or use CCTV inside the building?

Landlords may use CCTV in communal areas if it is proportionate and lawful, but recording inside private homes or using audio recording without consent is usually not permitted; check notices, your tenancy agreement and raise a SAR or complaint if you suspect unlawful surveillance.

How long can my landlord keep my data?

Data should only be kept for as long as necessary for its stated purpose; retention periods depend on the reason for processing (for example accounting or tenancy history) and must be reasonable and justifiable.

What if my landlord refuses to correct incorrect data?

If correction is refused, keep evidence of your request, complain to the ICO and consider using the Housing and Property Chamber if the incorrect data affects tenancy rights or leads to an adverse decision.

How-To

1. List the exact records or types of personal data you need.
2. Write a clear, dated subject access request including your name, address and ID, and send it to your landlord or agent.
3. Keep proof of sending (email receipt or photo of posted letter) and note the date received.
4. Wait up to one month for a response, or up to two months if the request is complex.
5. If there is no satisfactory response, complain to the ICO and consider applying to the Housing and Property Chamber.

Help and Support / Resources

• Contact the First-tier Tribunal for Scotland (Housing and Property Chamber)
• Contact the Information Commissioner's Office (ICO)
• Scottish Government housing guidance

---

1. [1] ICO: How to make a subject access request
2. [2] ICO: Make a complaint
3. [3] Housing and Property Chamber: Apply and forms