Can I Share My Tenancy Agreement? GDPR Rules for Landlords Refinancing or Selling
If you’re refinancing a buy-to-let, selling a tenanted property or getting a portfolio valued, sooner or later someone will ask for “a copy of the tenancy agreement” to prove the rent.
It feels like a harmless request. But a tenancy agreement is packed with personal data: names, contact details, sometimes dates of birth, guarantor details, deposit information and more. Handing it over without thinking can put you on the wrong side of UK data protection law.
Here’s what you need to know.
You’re a data controller, whether you think of it that way or not
Under UK GDPR and the Data Protection Act 2018, a landlord who holds tenants’ personal information is a data controller. That means you’re responsible for making sure any use or sharing of that data is lawful, fair and limited to what’s actually needed.
Most landlords must also pay the data protection fee to the Information Commissioner’s Office (ICO), unless an exemption applies.
The three questions to ask before sharing
Before you send a tenancy agreement to anyone, ask yourself:
Do I have a lawful basis?
You need a valid reason under UK GDPR to share personal data. For example, sharing with your own mortgage lender where it’s genuinely required for the lending might fall under legitimate interests. Sending it to an unconnected third party for their own purposes usually won’t.
Is this the purpose the data was collected for?
Tenant data was collected to create and manage the tenancy. Using it for something unrelated, like helping someone else value their property, is a different purpose, and that’s a problem.
Do they actually need all of it?
This is the big one. The principle of data minimisation means you should only share what’s necessary. A valuer needs to know the rent. They don’t need your tenant’s name, email or phone number.
Common scenarios
Your own lender or broker (refinancing your property) This is the most defensible scenario, as it relates to your own property and a legitimate business need. Even so, check what’s actually required. Many lenders will accept a rent schedule or a letter from your managing agent. If a copy of the agreement is needed, redact personal details unless they’ve specifically said otherwise.
A buyer’s solicitor during a sale of a tenanted property When a property is sold with tenants in place, the buyer does need to understand the tenancy. This is usually handled through the conveyancing process and is generally legitimate, but share it through the solicitors rather than directly, and only at the right stage.
An unconnected third party wanting evidence of local rents This is where landlords most often get caught out. A neighbour, another investor or a valuer working on a different property has no connection to your tenants. Sharing the full agreement here would almost certainly be an unlawful disclosure.
What to share instead
In most cases, the other party doesn’t want your tenant’s details at all. They want proof of rental income. You can usually meet that need with:
A rent schedule showing property type, postcode district, rent and tenancy start date.
A letter from your letting agent confirming the current rent and tenancy status.
Anonymised rental comparables: bedroom count, area, rent and date, with nothing that identifies a person.
A redacted copy of the agreement, with names, contact details, signatures and any identifying information removed, if documentary proof is genuinely required.
If none of those will do and full details really are needed, the safest route is to get the tenant’s consent in writing first.
What can go wrong
An unlawful disclosure can lead to a complaint to the ICO, a claim from the tenant and, in serious cases, enforcement action. Just as damaging for landlords is the trust issue. Tenants who find their details have been passed around are far more likely to become difficult to deal with.
How we handle these requests
At Front Door Lettings, we’re ICO registered and field requests like this regularly on behalf of our landlords, from lenders, brokers, valuers and solicitors. We provide the rental evidence people actually need, in a format that protects both landlord and tenant. Just as standard, as part of our fully managed letting service.
It’s one of many small compliance tasks that are easy to get wrong when you’re managing property alongside everything else. If you’d rather it was handled for you, find out more about our fully managed lettings service.
This article is general guidance and not legal advice. For complex or borderline cases, speak to a data protection specialist or check the ICO’s guidance.
