Rental Applicant Documents: An England Privacy Guide

A rental applicant who hesitates to send a passport and bank statements is not necessarily refusing to be checked. They may be asking who will receive the files, why each one is needed and whether there is a safer way to provide them. For landlords in England, the useful response is a clear document process, not a demand to prove trust by sending everything immediately.

This guide separates initial enquiries, financial referencing and England's right-to-rent checks. It is practical guidance, not a substitute for advice on your particular data-protection duties or tenancy. The right-to-rent scheme discussed here does not apply throughout the UK.

Explain the next decision before asking for files

Start with what you are trying to establish. At enquiry stage, you may need to know the intended move-in date, household size and whether the applicant understands the advertised rent. Those questions do not automatically require a passport scan, a complete credit file and months of transactions from every interested person.

Later, a particular income claim may need supporting records. Identify that claim and the evidence that would answer it. Avoid presenting an old checklist as though every item is a legal requirement. The ICO's data-minimisation guidance requires information to be sufficient for its purpose, relevant and limited to what is necessary.

An applicant can understand the need for an income check while objecting to sending identity documents to an unexplained phone number. Treat the purpose, timing and delivery method as separate questions. Resolving one does not require ignoring the others.

Make the recipient and the process identifiable

Tell applicants whether you are handling the application yourself, using an agent or referring them to a screening provider. If a tenant or friend conducted the viewing, explain their limited role. The person who opened the door does not automatically need access to the applicant's financial records.

Make your privacy information available when collecting data. The ICO's privacy-notice guidance covers your contact details, purposes and lawful basis, recipients, retention and people's rights. A vague statement that information is needed for insurance does not explain who will actually see it. Check the provider's requirements and describe the real arrangement.

For example, distinguish sending evidence to a referencing company from retaining it yourself in case an insurer later asks how you assessed the application. Do not tell applicants that an insurer is conducting checks unless you have confirmed that this is what happens. Equally, do not promise that only you can access documents if your agent, staff or service providers also handle them.

Keep right-to-rent checks separate from affordability

A passport is not evidence of income, and a successful income check is not a right-to-rent check. The Home Office's right-to-rent guidance explains who must be checked before a tenancy starts. Where the scheme applies, check all relevant adult occupiers, not only people you assume are from another country.

Follow the permitted checking method for the person concerned. Depending on their circumstances, this may involve eligible documents, an online share-code check or another prescribed route. Do not invent a universal rule that every applicant must send a passport photograph through a messaging app. A file arriving in your inbox does not by itself establish that you have completed the required check.

Explain when you will carry out this step and what it involves. If the applicant offers another document or checking method, compare it with current Home Office guidance rather than treating unfamiliarity as dishonesty. Do not apply informal redaction or deletion arrangements that prevent you from keeping the evidence required by the official process.

Agree useful redactions before the applicant sends anything

For financial referencing, identify which details you need to read. A statement intended to support salary payments should retain the relevant dates, amounts and enough identifying information to connect it with the applicant. Discuss whether unrelated transaction descriptions can be obscured. Do not promise that every redacted document will be acceptable to an external provider without checking its process.

Suppose an applicant sends a statement with the entire transaction section hidden. You cannot use it to confirm the salary deposits you requested. Explain that specific gap and ask for a suitable record. That is different from concluding that any redaction proves fraud. If the concern is business income, our newly self-employed applicant guide explains why the period and type of financial evidence matter.

Avoid inspecting unrelated purchases simply because a document makes them visible. Never ask an applicant to give you banking passwords, tax-account credentials or one-time sign-in codes. If you use a specialist service, explain its identity and process so the applicant can assess the request independently.

Choose a delivery method you can actually manage

A familiar messaging app is convenient, but the conversation is only one part of the document's journey. Think through downloads, shared devices, forwarded messages and copies left with anyone helping you. A more formal upload process is useful only if access and later handling are appropriate too.

• Give applicants one clear destination and a named contact for questions.
• Limit access to people who need the information for their actual role.
• Check recipients before forwarding anything and avoid casual group chats for documents.
• Use account protections and keep devices used for applications secure.
• Offer a workable alternative when a delivery method creates a genuine access or privacy problem.

Do not promise that a restricted link makes copying impossible. Nor should you ask applicants to send another complete set of files through email simply because you have not checked the existing submission. A clear record of what arrived, what it supports and what remains missing prevents repeated requests.

Decide what happens to records after the application

The ICO's storage-limitation guidance does not set one universal retention period. Set and justify periods for the purposes involved, review them, and remove information when no longer needed. An unsuccessful enquiry, a decision record and legally required right-to-rent evidence may have different retention needs. Do not keep everything forever or promise immediate deletion of records you must lawfully retain.

If the applicant remains uncomfortable, identify the unresolved check and explain available alternatives. If the application cannot proceed, describe the evidence gap factually. Avoid labelling someone difficult merely because they asked how their documents would be handled.

RentForms can help you start with proportionate questions and review initial responses before viewings. It does not choose your lawful basis, perform Home Office checks or make your document process compliant for you. Those responsibilities need an explicit plan beyond the application form.