The Guild urges estate agents to take Data Subject Access Requests seriously
By Author Andrew Stanton CEO Proptech-PR
The Guild of Property Professionals is urging estate and letting agents to take a proactive approach to Data Subject Access Requests (DSARs), warning that increasing consumer awareness of personal data rights is placing greater responsibility on property professionals to ensure they understand and comply with their legal obligations.
Paul Offley, Group Compliance Officer at The Guild of Property Professionals, says that agents must recognise the importance of handling requests correctly, particularly as the volume and complexity of requests from individuals seeking access to their personal information continues to grow.
Each month, Offley receives numerous compliance questions and queries from Guild Members, providing valuable insight into the challenges facing agents. Over the past month, he has seen an increase in the number of requests from individuals seeking access to their data, some of which can be particularly complex, especially where an agency has maintained a long-standing relationship with the individual concerned.
With estate and letting agents holding significant amounts of personal information relating to buyers, sellers, landlords and tenants, understanding Data Subject Access Requests is no longer optional. It is an essential part of professional practice, maintaining customer trust and ensuring regulatory compliance.
Under the UK General Data Protection Regulation (UK GDPR), individuals have the right to request access to personal data held about them by an organisation. For estate and letting agents, this can include emails, property records, viewing notes, correspondence, internal communications and other information relating to a particular individual.
However, Offley is concerned that some agents may still underestimate the significance of a DSAR, viewing it as an administrative inconvenience rather than a legal obligation that requires careful consideration and handling.
A DSAR is more than simply providing a copy of a file
A Data Subject Access Request can arise at any stage of the property journey, whether from a prospective buyer, seller, landlord, tenant or any other individual whose personal information is being processed.
Requests can be made verbally or in writing, and individuals do not have to specifically use the words ‘Data Subject Access Request’ for their request to be valid.
Offley highlights that responding appropriately involves considerably more than simply forwarding a collection of emails or printing a customer record. It requires identifying relevant personal data, considering the rights of other individuals, applying appropriate exemptions where necessary and ensuring that information is disclosed securely and within the applicable statutory timeframe.
Why this matters to the property industry
Estate and letting agents hold significant volumes of personal information, often involving sensitive circumstances, financial details, family situations and communications between multiple parties.
Failure to recognise or properly manage a request can expose an agency to unnecessary risks, including regulatory complaints, reputational damage, customer dissatisfaction and potential enforcement action.
Conversely, a well-managed DSAR process demonstrates that an agency understands its responsibilities and respects the rights of the individuals it serves, helping to build confidence and trust.
Professionalism includes protecting people’s data
According to Offley, data protection must be treated with the same level of importance as the other legal and professional responsibilities that estate and letting agents manage every day. Agents are rightly expected to understand their obligations around property transactions, client money, professional conduct and consumer protection. Protecting personal information and respecting individuals’ data rights should be no different.
Offley says: “Understanding DSARs is not simply a matter for compliance officers or senior management. Frontline staff, negotiators, property managers, administrators and branch managers all have a role to play in recognising requests and ensuring they are passed to the appropriate person.”
A request received by a negotiator or property manager should never be overlooked simply because it has not arrived through a formal compliance channel. Ensuring that everyone within an agency understands how to recognise a request, and knows what action to take when one is received, is therefore an important part of maintaining a compliant and professional business.
The message is clear: preparation is better than reaction
“Estate and letting agencies should review their existing processes and ensure they have clear procedures in place for recognising, recording and responding to Data Subject Access Requests,” says Offley. “This should be supported by appropriate staff training and a thorough understanding of what personal information may be held across the agency’s systems, records and communications.”
By embedding data protection awareness into everyday working practices, agencies can reduce risk, improve customer confidence and demonstrate a commitment to responsible professional conduct. Ultimately, understanding a Data Subject Access Request is about much more than meeting a legal requirement. It is about recognising that the personal information entrusted to an estate agent belongs to the individual, and that respecting their rights is fundamental to professional business practice.
For estate and letting agents, taking DSARs seriously is not simply a compliance exercise. It is an essential part of delivering the professionalism, transparency and trust that consumers should expect from the property industry.
