GDPR Made Tenant Data Everyone's Problem — Including Yours

Most European landlords have never thought of themselves as a data controller. You rent out a flat. You are not a tech company.

But look at what a tenancy actually accumulates: full name, phone number, email address, previous address, employment and income details, bank details, sometimes a copy of an ID document, and a running history of what they paid and when. That's a detailed file on a private individual, and Europe has strong views about files on private individuals.

The principles matter more than the acronym

Whether and precisely how the rules apply to you depends on your circumstances and country, and it's worth getting that confirmed rather than assumed. But the underlying principles are consistent, and they're good practice regardless:

Collect only what you actually need. A copy of a passport you took "just in case" is data you now have to protect and justify holding.

Keep it only as long as you need it. Applicant files for the twelve people who didn't get the flat are the ones most likely to be sitting in an inbox years later.

Keep it secure. Which raises the question most landlords have never been asked.

Where is your tenant data, right now?

For most people the honest answer is: scattered. Some in a phone's contacts, some in WhatsApp, some in email, a spreadsheet in a personal cloud drive, photos of documents in a camera roll that syncs somewhere, and a paper file in a drawer.

Every one of those locations is a place the data can leak from, and a place you'd have to search if a tenant exercised their right to ask what you hold about them. Scattered data isn't just a security problem — it's an answerability problem.

Fewer copies in fewer places

The practical fix is unglamorous: reduce the number of places tenant data lives, and prefer places that don't replicate it onto servers you don't control. Every additional sync is another copy, another jurisdiction, and another party you're trusting.

How LandlordViva helps

LandlordViva stores tenant details, lease terms and payment history locally on your device by default. There's no cloud account to sign up for and no tenant data leaving your phone unless you choose to export or back it up yourself. That doesn't discharge your obligations — you still decide what to collect and how long to keep it — but it does mean the answer to "where is this data?" is a single, specific place you're holding.

The regulation didn't create the risk. It just named something that was already true: you're holding a detailed file on someone else's life, and how carefully you hold it is a decision you're making whether or not you've noticed.