Data Protection Practices for Landlords and Tenants in The Digital Age

The rental landscape today has changed quite a bit in just a few decades. Services like lease signings, maintenance requests, and rent payments moved online. This convenience, however, has brought security liabilities. With things like rental scams on the rise, protecting personal and financial information is a necessity for both landlords and tenants. Let’s understand the legal responsibilities, data protection strategies, and common threats to foster a trustworthy rental environment.

Data Responsibilities

In Europe, data protection is a legal obligation for landlords. For example, under regulations like the General Data Protection Regulation (GDPR), landlords are considered “data controllers.” The title comes with legal obligations regarding the collection and processing of a tenant’s personal information. The United States does not have a comprehensive federal data privacy law. Instead, landlords have to comply with specific federal and state-level regulations. Key federal laws for landlords:

• The Fair Credit Reporting Act (FCRA): The law mandates that a landlord has to get the applicant’s written consent if they want to use a tenant’s credit report or run a background check in order to make a rental decision.
• The Fair Housing Act (FHA): Landlords must ensure their data collection and screening processes do not discriminate against protected classes.

While federal laws provide the baseline, most changes in terms of data privacy are happening at the state level. At the moment, 20 states have passed data privacy laws that give consumers, in this case, tenants, more control over their personal data. Similar to GDPR law, tenants are granted the right to know what information is being collected and the right to request deletion. A growing number of laws means landlords must be informed about the changes in the states where they operate.

Most Common Data Risks in the Rental Market

Before diving into the necessary safeguards, it’s wise to know what the most common online threats people will find in rental arrangements are. 

1. Identity Theft and Phishing

The FBI’s Internet Crime Complaint Center (IC3) recently reported on increasing scams in the rental industry. Scammers can often create fake listings online for properties they do not own to steal security deposits or to collect personal information. Cybercriminals can impersonate landlords or property managers and send phishing emails to divert payments.

2. Non-secure Communication Channels

It’s important to exchange leases and payment confirmations through secure and encrypted channels. Standard platforms like email or text messages are extremely risky because they do not provide additional functionality to ensure data safety.

3. Vulnerabilities in Smart Homes

Every smart device, including locks and cameras, can pose potential privacy risks. Unsecured or poorly configured devices are easy entry points for cybercriminals. This can lead to unauthorized access or surveillance. A recent report by a research firm, Forescout, highlighted that routers now account for half of the most critical vulnerabilities, surpassing computers. It has also become a preferred target for attackers seeking an initial access point to a network.

Both parties can add a layer of security by using software that encrypts connections. A good starting point is to understand what VPN apps are and how they make any connection more robust. An enterprise VPN can create a secure and encrypted connection between devices you use and the internet, which makes your activities unreadable if the network is vulnerable.

Best Data Protection Practices for Landlords

Data protection is a shared responsibility. Following the same rules, both landlords and tenants can help create and foster a secure digital space.

1. Data Minimization

Follow the FCRA rulebook. Landlords must obtain written permission before running any background checks and get rid of documents when they’re no longer necessary. Beyond the legal requirements, don’t collect everything; prioritize only the necessary data that is needed for lease management.

2. Privacy Notice

Although this step is not a legal requirement, providing a clear privacy notice about what is collected can build trust with any potential tenant. 

3. Secure Digital Storage and Communication

Everyone should store their documents in encrypted cloud storage or secure property management software. Both parties should follow strict measures: create strong and unique passwords, along with two-factor authentication (2FA), to ensure only authorized parties can view protected data.

Best Data Protection Practices for Tenants

Tenants also have a responsibility in keeping data safe, especially when they use connected devices or send their payments online.

1. Listings and Communication

Be thorough and look for signs of potential problems with rental property listings. Don’t send over deposits for any rental place without meeting a person or doing a live call. Get the necessary information, verify the landlord’s identity, and confirm if they legally own the property.

2. Secure Home Network

As mentioned previously, routers account for a lot of safety vulnerabilities, and at the same time, they’re a portal to your digital world. Make sure your router has its default password changed, updated firmware, and uses high-level encryption, such as the WPA3 security protocol.

3. Keep Online Payments Secure

Tenants should avoid sharing documents through non-secure messaging platforms and be cautious of any common phishing strategies, like last-minute emails or texts informing of a change in payments. Consequently, making any payments or transfers should be done on a secure network and not on public Wi-Fi.

4. Know Your Rights

U.S. law recognizes a tenant’s right to “quiet enjoyment” of their home, which means landlords cannot enter without proper notice. Although not a digital data protection principle, the idea should be extended to modern online surveillance.

Conclusion

While the U.S. rental market doesn’t have a comprehensive data protection law, on the state level, progress is being made, which marks a trend towards stronger tenant privacy. Ultimately, protecting personal information is more than just legal compliance; respectful practices and safe digital routines could lead to a trusting relationship between landlords and tenants.