While it’s always encouraging to see the social housing sector embrace data protection, it’s disheartening to see the image used on an article in Social Housing magazine on Data Protection Day 2025 is the same old padlock, and – more importantly – that the article doesn’t touch on one of the biggest threats to residents regarding personal data; the data grab that’s being encouraged by organisations that should know better.
Of course I don’t disagree with anything Emma Wright, group manager, public advice and data protection complaints services, of the Information Commissioner’s Office says in her article, but I would like to add another perspective.
The article highlights the undisputed fact that the sector collects lots of personal data, and mistakes can cause serious harm:
“The housing sector handles, collects and stores an array of personal information and the consequences of mishandling this data, intentionally or not, can cause serious harm.”
As often happens though, largely due to the phrase itself I believe, the term data protection seems to focus on – only – the protection, or security, of data that is held by organisations. When in fact, it starts with (or should!) asking the question “should we be collecting or holding this data in the first place?”
There is no better way to protect residents’ data from being misused or breached than not collecting or holding it.
Unfortunately, whether it is intended or not, the wording of certain standards from the Regulator of Social Housing and recommendations from the National Housing Federation, and – to a lesser degree – the Housing Ombudsman Service, are being interpreted by many housing providers as a requirement to collect more and more information about the people the sector serves, with no clear purpose, nor lawful basis to do so.
EDI (equality, diversity and inclusion) related data is an area where this is particularly high risk, as the data collected is potentially very sensitive as it relates to characteristics for which many people find themselves discriminated against. And this can lead to residents fearing their landlord’s motives, even if the landlord has only the best intentions. In addition, of course, a data breach involving such highly sensitive data could have even more painful outcomes than other data.
Because EDI data is a topic of huge interest (and confusion!), and following a few sessions I’ve run for members of the DiSH, and the Disruptive Innovators Network (DIN), we now have three core ways you can help your organisation take the next steps:
- Purchase the online EDI Data Toolkit, for only £150 incl. VAT.
- Book a bespoke EDI Data Strategy Workshop plus follow-up session for all your key colleagues, for £1,250 (+ VAT).
- Book the newly launched EDI Data Insights Accelerator, for £2,800 (+ VAT).
Plus, there are lots of clear & practical EDI Data resources inside the DiSH (Data in Social Housing) Network too. Join the DiSH for £36/month incl. VAT: https://cpdataprotection.com/resource/dish-membership/