Latest News

Clarity provided for agents in North of England

03 August 2020

On the evening of Thursday 30 July, the UK Government announced a tightening on restrictions for some areas within the North of England in order to protect against the risks to public health arising from Coronavirus. Read More...

Ten new courts unveiled to tackle evictions proceedings backlog

30 July 2020

The Lord Chancellor, Robert Buckland announced on 19 July 2020 the locations for ten ‘Nightingale Courts’ which have been rapidly set up with the aim of tackling the impact of Coronavirus on the justice system. Read More...

Demand from tenants and rental supply highest on record for June

30 July 2020

ARLA Propertymark’s Private Rented Sector (PRS) June report saw the number of new prospective tenants continue to rise, following the Government’s COVID-19 lockdown, with the average branch registering 79 new tenants, compared to 70 on average in May. Read More...

Major GDPR fine sends warning to property professionals

Thursday 28 November 2019

UK agents should take stock of their data collection and retention procedures, following the news that a Berlin property company has been fined more than €14.5m (£12.4m) due to a GDPR breach.

The German company, Deutsche Wohnen, is reported to have retained old customer data, which is a breach of administrative obligations, rather than a data breach which is loss or misuse of customer data.

It is reportedly the first GDPR fine in response to a company’s data retention activity and the largest fine received by a property company.

GDPR international relevance

Although a German investigation, it will be one which other data protection regulators, including the UK’s Information Commission, will be looking at for an indication of appropriate fines.

The GDPR came into force on 25 May 2018, and directly applies to all EU countries including the UK, even in the event of a no-deal Brexit. Any UK based businesses offering goods or services in the EU, or monitoring the behaviour of EU residents, will still need to comply with GDPR rules.

Deutsche Wohnen was found to have breached obligations to keep personal data for “no longer than is necessary for the purposes for which the personal data are processed”, to ensure that personal data is adequate, relevant and limited to what is necessary; and to provide appropriate technical and organisational measures designed to implement data protection principles.

Despite the regulator's request that it revise these activities, Deutsche Wohnen's improvements did not go far enough. The fine could have been millions of pounds higher, but Deutsche Wohnen is co-operating with the investigation and took steps to address its failure.

This case highlights to property companies the need to regularly review their data processes and the data which is kept.

PROPERTYMARK GDPR RESOURCES

Propertymark has a number of resources to help members understand and comply with their GDPR obligations.

GDPR resources