Last week, a report highlighted that landlords and letting agents in Nairobi’s premium rental market increasingly request employment letters, payslips, KRA PIN details, salary information, and other financial documents from potential tenants.
Landlords have a valid interest in assessing whether prospective tenants can meet their financial commitments for substantial leases. The key issue is not whether affordability checks should occur, but rather how much personal information is essential for establishing that affordability.
Kenya’s Data Protection Act serves as an excellent framework. It mandates that personal data must be gathered for specific, legitimate purposes, ensuring its relevance and limiting it to what is necessary. The Data Protection Regulations further emphasize this principle by encouraging organizations to evaluate whether they can achieve their objectives without processing extraneous personal information and to avoid unnecessary duplications.
In the context of renting, it is crucial to distinguish between demonstrating an attribute and surrendering the document from which that attribute originates. If the goal is to confirm that a prospective tenant possesses a stable income sufficient to cover rent, landlords need credible evidence of this fact without requiring excessive detail.
A complete payslip can disclose more than necessary, including employee numbers, tax details, deductions, benefits, pension information, loan obligations, and other financial factors that may not be relevant to the tenancy decision.
This concern extends to tax and banking records as well. A document may contain information pertinent to one particular inquiry while also including numerous identifiers and financial details that the recipient does not actually require. Requesting the entire document for convenience can transform a valid verification process into unnecessary data accumulation.
This issue is significant because each additional document introduces another security risk. When property agents collect hundreds of national identity documents, employment letters, payslips, tax records, and bank statements, they are not merely compiling a tenancy file; they are creating a repository of identities that could be exploited by fraudsters if any digital asset—be it an email account, laptop, cloud storage, or property-management system—gets compromised.
NIST’s current digital-identity guidance explicitly connects data minimization with reduced exposure to unauthorized access. It advocates for collecting only the information necessary for identity verification and authorization decisions, even suggesting yes-or-no attribute validation as a method to confirm facts without unnecessarily sharing the underlying identifiers.
This principle is directly applicable to housing. While landlords may need to confirm that an applicant meets an affordability threshold, they do not necessarily require every financial detail contained in the supporting document. The challenge lies in designing screening processes that focus on the decision at hand rather than simply on the documents that have traditionally been requested.
Kenya’s property sector must also carefully consider data retention. Information that is necessary during the application process does not remain essential indefinitely. An unsuccessful applicant may never become a tenant, yet copies of identification, payslips, and financial documents can linger in emails, messaging apps, or cloud storage long after a decision has been made.
The Office of the Data Protection Commissioner has already emphasized that organizations handling personal information must understand what they collect, why they collect it, where it is stored, who receives it, how long it is retained, and how it is ultimately disposed of. The property management sector is among those facing increased scrutiny for compliance.
This awareness should foster more disciplined practices in rental screening. Applicants should be informed about the information requested and its purpose. Agents need to clarify who can access this information, how long it will be retained, and what occurs if an application is unsuccessful. Sensitive financial documents should not accumulate in personal email and messaging accounts without established access controls and deletion protocols.
The long-term potential extends beyond merely securing current paperwork. Digital identity is evolving towards selective disclosure, where individuals can verify required facts without exposing all details in the underlying credentials. The World Wide Web Consortium’s Verifiable Credentials architecture supports this concept, enabling holders to share selected attributes or validate derived facts without relinquishing entire credentials.
This principle is easily illustrated through age verification. When accessing age-restricted services, a person may need to prove they are over 18 without revealing their full date of birth, home address, or identification number just because those details appear on the same document.
Affordability verification could eventually adopt a similar approach. A trusted institution or authorized verification service could confirm that an applicant’s income meets a defined rental-affordability threshold. This would provide landlords with reliable answers about lease suitability while keeping applicants’ specific salaries, deductions, and unrelated financial information confidential.
This is not a mere theoretical consideration. Privacy-preserving attribute credentials, selective-disclosure mechanisms, and zero-knowledge proofs are actively being researched and developed. The European Digital Identity Wallet is also being designed to facilitate selective disclosure, allowing users to share only the necessary attributes for specific transactions instead of complete identity documents.
However, Kenya must not hastily adopt technological solutions without governance. A digital affordability credential could introduce new challenges if it morphs into an opaque scoring system that automatically excludes individuals whose income does not fit conventional employment models. Entrepreneurs, freelancers, informal-sector workers, and households contributing to rent may not possess traditional payslips, even if they can easily meet their rental obligations.
The goal should be verification without unnecessary disclosure, rather than automation devoid of judgment.
Applicants must also have the means to rectify inaccurate information and understand the rationale behind significant adverse decisions. A privacy-preserving system that leads to unfair or unchallengeable outcomes would merely shift one governance issue while creating another.
Comparative experiences underscore the importance of caution. Privacy regulators in countries like Canada and New Zealand have already issued specific guidance for landlords and property managers, as tenancy applications often involve substantial amounts of personal and financial data. Current research on digital rental platforms warns that excessive data collection can pose privacy, discrimination, and security risks for renters.
Kenya should heed these lessons before tenant screening becomes yet another area where excessive data collection is normalized simply due to the ease of digital tools.
Landlords do not need to abandon financial due diligence. Individuals entering high-value leases should be expected to establish their identity and demonstrate their ability to fulfill contractual obligations. However, proportionality should govern how that assurance is obtained.
The pertinent question is not how much information a landlord can collect but how little is sufficient for responsible decision-making. Therefore, Kenya’s rental market should adopt a straightforward privacy principle: verify only the information necessary for the tenancy decision and collect no more than what is genuinely required. This approach safeguards landlords’ legitimate financial interests while minimizing the sensitive information tenants must provide to secure a home.
Proving someone’s ability to pay rent should not necessitate revealing their entire financial history.
