Skip to main content
OBL-056 Landlord obligations · England

Tenant Privacy Notice — landlord obligations in England

As a landlord you collect and store personal data about your tenants — names, contact details, financial information, and identity documents. UK GDPR law requires you to tell tenants what data you hold, why you hold it, how long you keep it, and their rights over it. This is done through a privacy notice given to the tenant at or before the start of the tenancy.

Obligation OBL-056 Last reviewed: June 2026 England
Privacy notice document provided to tenant explaining landlord personal data use under UK GDPR Article 13
All landlords who collect or store personal data about tenants or prospective tenants. This applies to virtually all private landlords. Photo: Unsplash (free commercial use).
Applies to
All landlords who collect or store personal data about tenants or prospective te
Evidence
Documentary evidence required
Jurisdiction
England
Statutory basis

The law that creates this obligation

Primary instrument
UK GDPR Article 13; Data Protection Act 2018
What the law requires

Your obligations as a landlord

  • Who this applies to: All landlords who collect or store personal data about tenants or prospective tenants. This applies to virtually all private landlords.
  • When it applies: At or before the start of the tenancy, and whenever the information you hold or your purposes for holding it change materially.
  • What you must do: Give the tenant a privacy notice before or at the start of the tenancy. The notice must explain: what personal data you collect, why you collect it, how long you keep it, who you share it with, and the tenant's rights to access, correct, or ask for deletion of their data. Keep a record that the notice was given.
Evidence standard

What good evidence looks like

Your compliance file should contain

  • Written record or document confirming this obligation has been met
  • Date of compliance — email timestamp, signed receipt, or platform log
Workspace task: Record privacy notice given
Upload a copy of the privacy notice given to the tenant and record the date it was provided.

Record this obligation in your LettingsLedger workspace

Upload evidence, set reminders, and build a timestamped compliance record — all in one place.

Failure and enforcement

Consequences of non-compliance

What happens if you do not comply

Failure to provide a privacy notice is a breach of UK GDPR. The Information Commissioner's Office can issue enforcement notices, fines, and reprimands. Tenants also have the right to complain to the ICO and seek compensation.

LL
LettingsLedger editorial team
Verified against legislation.gov.uk and official GOV.UK guidance
Related guides

Further reading for landlords

LettingsLedger is a compliance evidence governance platform. It is not a legal services provider and does not provide legal advice. Content is derived from UK primary legislation at legislation.gov.uk and official GOV.UK sources. Reflects the position as at June 2026. A GovProtocol product by Pertheo Limited.