This is a very interesting question.
Here is one simple response to the indelicate questions asked for which an answer is demanded, and a perfectly reasonable one crafted by AI would be to ask the managing agent:
“Before I provide my tenants' personal contact details, please confirm the purpose for which you require their names, telephone numbers and email addresses, the lawful basis on which you will process that information, and provide the relevant privacy information applicable to the tenants.”
There may well be a legitimate reason. For example, emergency access, safety communications or necessary building-management contact could potentially justify some sharing. But “we would like the details for our records” isn't by itself a lawful basis under the GDPR.
Questions about a lessee registering as a landlord in order to let their flat out is simply way out of order.
Or of course there is the great British solution - ignore the form.
More interesting questions to be asked of a Property Manager are:
- Complaints procedure.
- Data Handling procedure.
1. The Property Institute (TPI) requires all of its member firms and company members to have a written in-house complaints handling procedure.
Key Requirements:
- Written Procedure: Members must maintain a clear, documented complaints procedure.
- Public Availability: The procedure must be publicized and provided to any leaseholder, resident, or client who requests a copy.
- Ombudsman Access: Members must also offer access to an independent, government-approved ombudsman scheme.
- Resolution Window: Formal complaints typically must go through the member's internal process first (for up to eight weeks) before the independent ombudsman will step in to investigate an unresolved dispute.
2. The Property Institute (TPI) expects its company members to handle data in compliance with data protection laws and provides dedicated TPI Guidance Notes on GDPR, though a specific written procedure like a complaints handling procedure falls under broader legal compliance rather than a standalone mandatory TPI-published template of that exact name.
Key Data & Compliance Context
- Legal Obligation: TPI member firms must comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 as part of operating within the law.
- Member Guidance: TPI provides specialized resources, training courses (such as Data Protection and GDPR in Leasehold Management), and advisory notes to help members establish compliant data processes, detect breaches, and manage subject access requests.
- Accreditation and Audits: Company members undergo periodic compliance reviews and audits evaluating general management and operational standards.
-