Tenant documents: what a landlord may collect and keep
A landlord has legitimate reasons to collect tenant identity documents: police intimation where a local order requires it, and knowing who is in the property. What is not legitimate is collecting more than the purpose needs, keeping it after the purpose ends, or storing it carelessly. The Digital Personal Data Protection Act, 2023 and the Rules notified in November 2025 will make that a compliance question rather than a courtesy, with obligations phasing in through to May 2027.
Why a landlord collects documents at all
There are real reasons, and it is worth separating them from habit. Where a local police order requires tenant intimation, the landlord has to report particulars and needs the documents to do it. Beyond that, knowing who is living in a property you own is reasonable, and a tenancy agreement needs the parties correctly identified.
What does not follow from any of that is collecting every document a tenant has, keeping copies forever, and storing them wherever is convenient. The purpose defines what is needed, and most landlords collect well beyond it.
A proportionate set
What the usual purposes actually require, against what is commonly asked for.
| Document | Reasonable because | Watch for |
|---|---|---|
| Photo identity and address proof | Required to identify the tenant and to make a police intimation where one is required | One is usually enough. Collecting four is collecting three too many |
| Photographs of adult occupants | Commonly required by the police intimation form | Needed for the filing, not for a personal archive |
| Employer or institution details | Sometimes asked for on the intimation form; otherwise a screening preference | Be clear which it is. A preference is not a requirement |
| Previous landlord reference | A screening decision before the tenancy | Serves no purpose once the tenancy has started |
| Bank statements or salary slips | Occasionally used for screening affordability | Highly sensitive and rarely necessary; returning or deleting them after the decision is the sensible course |
What changes under the data protection regime
The Digital Personal Data Protection Act, 2023 was enacted in August 2023, and the Digital Personal Data Protection Rules were notified in November 2025. The substantive obligations are being brought into force in phases rather than all at once, with the implementation running through to 2027, so the correct statement today is that this is arriving rather than that it is fully in force.
When it applies, a landlord handling tenant documents in digital form is processing personal data for a purpose, which brings the ordinary obligations with it: a notice explaining what is being collected and why, consent that is free, specific, informed and unambiguous, collecting only what the purpose needs, keeping it only as long as the purpose lasts, and securing it.
For a landlord with a handful of tenants, none of that requires a compliance programme. It requires doing four things: asking for less, saying why, keeping it somewhere sensible, and deleting it when the tenancy ends and the purpose is spent.
What good practice looks like now
None of this waits for the obligations to commence; it is simply sensible.
- Ask for one identity document rather than a set, and say what it is for.
- Use masked Aadhaar where Aadhaar is the document, and accept an alternative where it is not necessary.
- Keep documents in one place you control rather than scattered through chat threads and a phone gallery.
- Do not forward tenant documents to brokers, caretakers or group chats, which is the most common way they escape.
- Delete what you no longer need when the tenancy ends, keeping only what you have a continuing reason to hold.
- If a tenant asks what you hold and why, answer. That question is about to come with rights attached.
Free tools you can use
Tenant documents FAQ
What documents can a landlord legitimately ask for?
Enough to identify the tenant and to make a police intimation where a local order requires one: typically one photo identity and address proof, photographs of adult occupants, and the details the local form asks for. Collecting several identity documents, bank statements or salary slips goes beyond that and needs its own justification.
Can a landlord insist on an Aadhaar copy?
Treat it as needing a reason rather than as routine. Aadhaar has its own statutory framework restricting collection and storage, and where identity simply needs establishing another photo identity usually serves. Where Aadhaar is genuinely the document being used, a masked copy is generally sufficient.
Does the DPDP Act apply to landlords?
A landlord handling tenant documents in digital form is processing personal data, so the framework is relevant. The Act was passed in 2023 and the Rules were notified in November 2025, with obligations being brought into force in phases running into 2027, so it is arriving rather than fully in force today.
How long can a landlord keep tenant documents?
As long as the purpose lasts, and no longer. Once the tenancy has ended and any intimation or record-keeping need is spent, there is no reason to keep copies, and holding them indefinitely is the part that turns into an exposure under the data protection regime.
Can I ask my landlord to delete my documents?
You can ask, and a landlord acting properly will. The data protection framework gives that request force as its provisions come into effect, but it is reasonable to ask now, particularly at the end of a tenancy.
Can a landlord share tenant documents with a broker or caretaker?
Only where there is a reason tied to the purpose they were collected for, and it should be limited. Forwarding documents into group chats or to intermediaries is the most common way tenant identity documents escape, and it is difficult to justify under any reading of the obligations.
On RentStalk
Referred to
- The Digital Personal Data Protection Act, 2023
- The Digital Personal Data Protection Rules, notified in November 2025, with obligations commencing in phases
- The Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016 and the framework made under it
- The Bharatiya Nagarik Suraksha Sanhita, 2023 — Section 163, under which local police orders on tenant intimation are made
This is general information, not legal advice. The data protection obligations described here are commencing in phases and the applicable position changes as provisions are brought into force, while Aadhaar handling has its own framework. Take advice from a qualified professional if you hold tenant data at scale.