GDPR Compliance

Published on Fri, 6th Apr 2018 21:30

The General Data Protection Regulations (GDPR) comes into force on May 25th 2018.

If you hold information about anyone on a computer, and they can be recognised from that data you will need to:-

  • Register with the Information Commissioner’s Office.  It is very quick and easy and cost £40 per annum.  If you are not sure if you need to register you can take a self-assessment.

  • You will need to prepare a Privacy Notice to issue to all new and existing tenants.  iHowz members can see a Privacy Notice in the General Notice Section of the documents section.

    Note that the AST in the agreements section of the documents section now contains the Privacy Notice.

  • Ensure you only keep data for as long as legally required.

    This is a tricky area.  It has been stated that landlords must keep ‘Right to Rent’ data for a year after the tenancies ceases – so this is straight forward.  But if you are unlucky enough to suffer an HMRC investigation, and they suspect fraud, they have the right to go back as far as they deem necessary.  This then suggests you should not get rid of financial information that HMRC might demand to see.