Disclaimer:
This article provides general information only and does not constitute legal advice. Privacy law is complex and individual circumstances vary. Consult with a legal professional for specific guidance on your privacy obligations.
Key Takeaways
- The Privacy Act 2020 applies to landlords who collect and hold tenant personal information.
- You can only collect information that is necessary and relevant for tenancy purposes.
- Tenant information must be stored securely and only used for the purpose it was collected.
- Tenants have the right to access their personal information and request corrections.
- Sharing tenant information with third parties without consent can breach privacy rules.
Managing rental properties means handling sensitive personal information about tenants. From application forms to payment records, landlords collect significant amounts of data. The Privacy Act 2020 sets out how you must handle this information, and breaches can result in complaints to the Privacy Commissioner and potential penalties.
Understanding your privacy obligations is not just about avoiding complaints. It builds trust with tenants, demonstrates professionalism, and protects you from liability. This guide covers what every landlord needs to know about privacy compliance.
Does the Privacy Act Apply to Landlords?
Yes. The Privacy Act 2020 applies to any "agency" that collects personal information, and this includes private landlords, not just businesses. If you collect information about tenants, you are subject to the Information Privacy Principles (IPPs) in the Act.
The Act is administered by the Office of the Privacy Commissioner, which can investigate complaints and make recommendations. While the Commissioner cannot award compensation directly, they can refer matters to the Human Rights Review Tribunal for serious breaches.
What Information Can You Collect?
You can only collect personal information that is necessary for a lawful purpose connected with your role as a landlord. For tenancy applications and management, this typically includes:
Appropriate Information to Collect:
- ☐ Full name and contact details
- ☐ Employment information and income verification
- ☐ Rental history and references
- ☐ Identification documents
- ☐ Emergency contact details
- ☐ Bank account for rent payments
Information You Should Not Collect:
- ☐ Ethnicity, religion, or political beliefs
- ☐ Medical conditions (unless directly relevant to tenancy needs)
- ☐ Family planning intentions
- ☐ Social media passwords
- ☐ Credit card details (beyond what is needed for payments)
Related: Tenant Screening Checklist
Collecting Information Fairly
When collecting personal information, you must tell individuals why you need it and what you will do with it. For tenant applications, this means having a privacy statement that explains:
- What information you are collecting
- Why you need it
- Who you might share it with (referees, credit check agencies)
- How long you will keep it
- How they can access or correct their information
Collect information directly from the individual where possible. If you need to contact previous landlords or employers, get consent first.
Storing Information Securely
Once collected, personal information must be protected from loss, misuse, and unauthorised access. This applies whether you keep paper files or digital records.
Security Best Practices:
- Store physical files in locked cabinets
- Use password protection and encryption for digital records
- Limit access to those who need it
- Keep backup copies secure
- Shred or securely delete documents when no longer needed
If you use cloud storage or property management software, ensure the provider has adequate security measures and preferably stores data in New Zealand or a country with equivalent privacy protections.
Using Information Appropriately
Personal information should only be used for the purpose it was collected. Tenant application information is for assessing suitability and managing the tenancy, not for marketing or sharing with unrelated parties.
Be particularly careful about:
- Sharing information with new owners if you sell the property
- Providing references about tenants to other landlords
- Discussing tenant situations with neighbours or other tenants
- Using tenant details for purposes unrelated to the tenancy
When giving references, stick to factual matters about the tenancy such as rent payment history and property care. Avoid subjective opinions that could be defamatory.
Tenant Rights to Access Information
Tenants have the right to request access to any personal information you hold about them. They can also ask you to correct information they believe is inaccurate.
You must respond to access requests within 20 working days. You can charge a reasonable fee for providing the information, but not an excessive amount designed to discourage requests.
There are limited grounds for refusing access, such as where disclosure would breach another person's privacy or prejudice legal proceedings. When in doubt, seek advice.
How Long to Keep Records
You should not keep personal information longer than necessary. However, tenancy records may be needed for disputes, tax purposes, or future reference checks. A sensible approach is:
- Unsuccessful applications: delete after 12 months
- Tenancy records: keep for 7 years after tenancy ends (for tax and legal reasons)
- Bond and tribunal records: keep for 7 years after resolution
Related: Record Keeping for Tax Compliance
Privacy During Inspections
Property inspections require balancing your right to assess the property against tenant privacy. You should not go through personal belongings, read mail, or photograph personal items.
If you take photos during inspections, focus on the property condition rather than tenant possessions. Do not share inspection photos publicly or with unrelated third parties.
Related: Property Inspections: Rights and Procedures
Data Breaches
The Privacy Act 2020 introduced mandatory breach notification. If you experience a privacy breach that is likely to cause serious harm, you must notify both the Privacy Commissioner and affected individuals.
A breach might include losing a laptop with tenant records, having your email hacked, or accidentally sending tenant information to the wrong person. Have a plan for how you would respond if this happens.
Working with Property Managers
If you use a property manager, they handle tenant information on your behalf. Ensure they have appropriate privacy policies and security measures. You remain responsible for how your tenants' information is handled.
Related: Working with Property Managers
Frequently Asked Questions
Can I run credit checks on prospective tenants?
Yes, but you need consent. Include a clause in your application form that authorises credit checks and explains what information will be accessed.
What if a tenant asks to see their file?
You must provide access within 20 working days. Prepare copies of application documents, inspection reports, correspondence, and any other personal information you hold about them.
Can I tell a new landlord why a tenant left?
Be cautious. Stick to factual matters such as tenancy dates, rent payment history, and property condition. Avoid subjective opinions. Consider getting the tenant's consent before providing detailed references.
Do I need a privacy policy?
While not strictly required, having a written privacy statement for tenants demonstrates good practice and helps ensure you meet your obligations to inform people about how their information is handled.
Useful New Zealand property investor resources
Property investment rules change, especially around lending, tax, and tenancy obligations. Use these authoritative New Zealand sources to check current settings before making decisions.
Official and market sources
Related property ecosystem guides
- First Home Buyers Club
First-home buyer guides, calculators, and mortgage adviser support for New Zealand buyers.
- Homeowners Club
Refinancing, renovation, insurance, maintenance, and equity resources for NZ homeowners.
Related Articles
Tenant Screening Checklist NZ
Complete tenant screening checklist for New Zealand landlords. Learn what to check, verify, and document when selecting tenants for your ren
Property Inspections: Landlord Rights and Procedures NZ
Learn about property inspection rights and procedures for landlords in New Zealand. Understand notice requirements, what you can inspect, fr
Landlord Responsibilities Under the RTA NZ
Understand your legal obligations as a landlord under New Zealand's Residential Tenancies Act. Learn about maintenance, privacy, notices, b
Record Keeping for Property Investors NZ
Essential record keeping guide for NZ property investors. Learn what documents to keep, how long to retain them, and systems to stay organis