What tenant privacy and data rights cover
Tenants in Scotland have privacy rights that overlap with data protection laws and tenancy law. These rights limit what landlords and agents can collect, how they store it, who they share it with, and when they may lawfully enter your property. If you provide personal information for referencing or a tenancy application, you can ask who has it and request copies.
Key types of data landlords may hold
- Records: referencing checks, ID documents and tenancy applications kept for vetting and compliance.
- Payment records: rent payments, deposit records and any agreed deductions or refunds.
- Notices and correspondence: written notices, breach letters and formal communications about the tenancy.
- Entry logs: appointments or inspection records that show when agents or contractors attended your home.
What landlords can and cannot do
Landlords may collect data that is necessary for the tenancy (identity, references, right to rent or tenancy administration), but they must have a lawful basis for processing it and keep it only as long as needed. Sharing data with contractors for repairs is allowed when necessary, but selling or passing on tenant records for marketing without explicit consent is not appropriate.
When a landlord can enter your home
Under Scottish tenancy rules a landlord or their agent must give proper notice and a permitted reason before entering, except in an emergency. The tenancy agreement and the Private Housing (Tenancies) (Scotland) Act 2016 set out permitted grounds for entry and inspection[1]. If entry is about repairs, contractors may see limited information needed to carry out the work, but they should not retain unrelated personal data.
How to request your personal data (Subject Access Request)
You can make a Subject Access Request (SAR) to your landlord or agent to obtain copies of the personal data they hold about you. A SAR should be clear about what you want (for example, referencing checks or inspection reports) and include enough identifying information for them to locate your data. The ICO provides practical guidance on making SARs and what responses you can expect[3].
- Write a short request stating you are making a Subject Access Request and list the documents you want.
- Give the landlord a reasonable time to respond (they must normally respond promptly and within one month).
- Keep a copy of your request and any replies as evidence in case of dispute.
Challenging misuse of data and privacy breaches
If you believe a landlord or agent has mishandled your data or breached your privacy, start by raising the issue in writing and asking for remedial action. If that does not resolve the matter you can complain to the Information Commissioners Office or apply to the Housing and Property Chamber for tenancy-related remedies, such as challenging unlawful sharing of personal information or seeking an order against harassment[2].
Practical examples of relevant forms and when to use them
- Notice to Leave: used by a landlord to start possession proceedings where lawful grounds exist; for example, a landlord serves this when they intend to seek eviction after giving the required notice period.
- Application to the First-tier Tribunal (Housing and Property Chamber) (Application Form): used by tenants or landlords to raise disputes such as unlawful eviction, rent repayment or breaches of the tenancy; for example, a tenant applies to enforce a landlords obligation not to share personal data unlawfully[4].
- Subject Access Request (SAR): not a numbered form but a formal written request under data protection law asking for all personal data held by the landlord; for example, request copies of all referencing checks and inspection notes related to you[3].
How the tribunal process works
If you cannot resolve a problem informally you can apply to the Housing and Property Chamber, which deals with most private tenancy disputes in Scotland. The tribunal can consider evidence, order remedies and make decisions about tenancy conduct and compliance. Applications typically require a completed application form, supporting evidence such as communications or inspection records, and any statutory fees where applicable[2].
FAQ
- Can my landlord keep a record of my referencing checks?
- Yes, landlords can keep referencing records if they have a lawful basis and keep them only as long as necessary for tenancy purposes.
- How long does a landlord have to respond to a Subject Access Request?
- Landlords must normally respond promptly and in any case within one month, unless an extension is permitted in complex cases.
- Who can I contact if my landlord shares my data without permission?
- You can complain to the Information Commissioners Office and, for tenancy-related remedies, apply to the Housing and Property Chamber.
How-To
- Identify the specific data you want (for example, referencing checks or inspection reports).
- Write a clear Subject Access Request stating your name, tenancy address and the records requested.
- Send the SAR to your landlord or agent by recorded delivery or email and keep proof of sending.
- Wait for the landlords response; if they fail to reply within one month, remind them in writing.
- If the issue is not resolved, complain to the ICO for data protection issues and consider applying to the Housing and Property Chamber for tenancy remedies.
Help and Support / Resources
- Contact the Housing and Property Chamber for applications and guidance
- Scottish Government housing guidance and tenancy information
- Information Commissioners Office guidance on data rights and Subject Access Requests
