The General Data Protection Regulation (GDPR) is a European Union (EU) law that governs the way in which the RTB can use, process, and store personal data (information about an identifiable, living person). The Data Protection Act 2018 is national legislation designed to protect people's privacy and it protects individuals’ rights in relation to the privacy of their personal data as well as providing for the RTB’s responsibilities for how we hold and process such data.
The term “processing” refers to “any operation or set of operations performed on personal data. Processing includes storing, collecting, retrieving, using, combining, erasing and destroying personal data, and can involve automated or manual operations.” The RTB processes personal data to fulfil our mandate under the Residential Tenancies Act, 2004 (as amended). As such we do not require data subjects to consent to the processing of their personal data as we require the data to fulfil our legal obligations under the Residential Tenancies Act 2004.
The RTB is committed to protecting the rights and privacy of individual’s data in accordance with the GDPR and the Data Protection Act 2018.
Data Subject Access Requests
Data Subject Access Requests are requests for personal data that are undergoing processing by a Data Controller.
In order to submit a Subject Access Request to the RTB please download the RTB Data Subject Access Request form in the 'Downloads' section at the bottom of this page.
Completed forms can be submitted by email to data.protection@rtb.ie or by post to:
Data Protection Officer,
Data Protection Unit,
Residential Tenancies Board,
PO Box 12323,
Dublin 2,
Ireland
When completing the Data Access Request form, please ensure to:
-
Give as much detail as possible (for example name, phone number, address, email address, Registration number and Dispute Resolution reference numbers) to enable the RTB to identify records containing your personal data undergoing processing.
-
Identification may be requested in situations where it cannot be confirmed that the requestor is the person to whom the personal data belongs to.
-
Include your contact details to allow the RTB to contact you and comply with your request.
The RTB aim to acknowledge Data Subject Access Requests within 15 calendar days and to issue a response within 30 calendar days of receipt of a valid request.
If you are not satisfied with the outcome of your access request you are entitled to make a complaint to the Data Protection Commission, Canal House, Station Road, Portarlington, Co. Laois, R32 AP23
Please note that, under the GDPR, the RTB is not obliged to provide “true unredacted copies”. The RTB is only obliged to issue a copy of the data that is undergoing processing "within" a record rather than whole record. Redactions are applied to personal data relating to third parties and in limited circumstances, such as those set down under the Law Enforcement Directive and the Data Protection Act 2018.
Data Sharing
The RTB receives information from a number of sources including the Department of Social Protection, Revenue Commissioners, Local Authorities, members of the public, tenants, tenant representative organisations, elected representatives, residents associations, and from the RTB dispute resolution database. The RTB reviews this information and engages with landlords who are found not to be registered.
The RTB also provides information to a number of other public sector bodies including the Department of Social Protection, the Local Authorities and the Revenue Commissioners.
RTB Privacy Statement
The Residential Tenancies Board is committed to protecting all personal and special categories of data held about you. Please take the time to read this Privacy Statement as it explains how we collect, use and store your personal data, and the rights you have in relation to the protection of your personal data.
Please note that we reserve the right to update this Privacy Statement as required. The most recent version of this document can be found through the following link.