Landlords across the UK are being reminded of their legal responsibilities around data protection, with many potentially unaware that they are required to register with the Information Commissioner’s Office (ICO) and pay a data protection fee.
For EMPO members, understanding whether you fall within scope is essential to avoid potential penalties and ensure compliance with UK data protection laws.
Why This Matters
If you handle personal data as part of your role as a landlord, you may be legally required to register with the ICO. This applies to a wide range of common activities, including:
- Creating tenancy agreements or contracts
- Carrying out tenant referencing or credit checks
- Collecting and storing tenant information
According to the ICO, processing personal data for these purposes means you are likely required to pay the data protection fee.
- Full guidance from the ICO:
https://ico.org.uk/for-organisations/data-protection-fee/
- Register or pay the fee here:
https://ico.org.uk/for-organisations/data-protection-fee/self-assessment/
Using a Letting Agent – Are You Exempt?
Many landlords assume that using a fully managed letting agent removes their responsibility, but this is not always the case.
You may be exempt under the accounts and records exemption if:
- Your letting agent fully manages the property
- You only receive rent and monthly statements
- You do not handle tenant data directly
However, you will still need to register if you:
- Keep your own database of potential tenants
- Make decisions about which tenant rents your property
- Receive or store tenancy agreements electronically
In these cases, you are still considered to be processing personal data.
Property Management Companies & Resident Data
If you are involved in a:
- Residents’ management company
- Property or block management company
- Freehold or flat management company
…and you process information such as:
- Resident contact details
- Financial contributions and payments
- Maintenance requests
- Contractor decisions (e.g. builders, gardeners)
- Dispute records
- CCTV footage
- Meeting notes
You are required to pay the ICO fee.
This type of activity is classed as property management and does not qualify for an exemption.
Commercial Property & CCTV
If you manage commercial property and operate CCTV for crime prevention, you are also required to register with the ICO and pay the fee.
What EMPO Members Should Do Now
EMPO strongly encourages all members to:
- Review how you handle personal data
- Use the ICO self-assessment tool to check if you must register
- Register and pay the fee if required
- Keep records of your compliance
Failure to register when required can result in enforcement action and fines.
Final Thoughts
Data protection is no longer just an administrative task; it is a legal obligation. Whether you are a hands-on landlord or use managing agents, it’s important to understand where responsibility still sits with you.
If in doubt, check. The process is quick, and the cost of compliance is far lower than the risk of getting it wrong.