Received a subject access request?
Now that it is free for individuals to make a subject access request for the personal data a landlord or letting agent holds on them, we are getting more and more advice queries on how to deal with such requests.
They usually come from disgruntled landlord clients or from tenants but if you have employees you may also occasionally receive one from a current or former member of staff. You must respond and provide all the personal data you hold on that individual within one month, although there are a limited number of exemptions which may allow you to refuse the request entirely or withhold some data.
The ICO website has comprehensive guidance on what you need to do to prepare for and deal with subject access requests. This can be read here.
SAL has a number of guidance documents and templates to help members comply with data protection legislation. The relevant landlord resources can be found here and the letting agent versions can be found here.