Your Data is Not an Open Book
When you apply to rent a property in the Netherlands, you'll be asked for a mountain of personal information. However, this process is not a free-for-all. The General Data Protection Regulation (GDPR)—in Dutch, the Algemene verordening gegevensbescherming (AVG)—sets strict limits on what data can be collected, why it's collected, and for how long it can be stored. The core principle is data minimization: a landlord or rental agent should only request the information that is strictly necessary to assess your suitability as a tenant. In practice, there is a constant tension between the landlord's desire to eliminate risk and the tenant's right to privacy. Many agents still ask for more data than is legally permissible, betting that prospective tenants won't dare to object for fear of losing the property.
The Data Dilemma: Necessary vs. Intrusive
So what can they legally ask for? The Dutch Data Protection Authority (Autoriteit Persoonsgegevens) has provided guidance:
- Acceptable Data: Name and contact details, proof of identity, proof of income (e.g., employment contract, recent salary slips), and the number of people who will occupy the property.
- Unacceptable Data: Asking for sensitive information like health data, sexual orientation, or your BSN (citizen service number) for the initial application is generally forbidden. They also cannot demand to see your full bank statements showing all your personal transactions. They need to verify your income, not judge your spending habits.
The most common violation is the request for an unredacted copy of your ID or passport. This is extremely risky as it contains your photo and your BSN, which can be used for identity theft. The correct, secure way to provide ID is by using the government's KopieID app. This allows you to create a safe copy by blacking out your BSN and photo and adding a watermark indicating who the copy is for and on what date.
Your Rights as a 'Data Subject'
Under the AVG, you are not just a tenant; you are a 'data subject' with specific, enforceable rights:
- Right to Access: You can ask the landlord or agent exactly what data they hold on you.
- Right to Rectification: If they have incorrect information (e.g., a misspelled name), you have the right to have it corrected.
- Right to Erasure ('Right to be Forgotten'): If you don't get the property, they must delete your data. If you do get the property, they must delete your data a reasonable time after your tenancy ends and all financial obligations are settled. They cannot keep your file indefinitely 'just in case'.
