Landlords rarely think of themselves as holding business data, but most do. You store tenant names, addresses, identity documents, and payment details, and you may run your lettings through connected systems. A cyber policy protects that data and the income you lose if an attack takes those systems offline.
Why landlords face cyber risk
If you manage properties yourself, you hold personal data on every tenant and applicant. A breach can expose identities and bank details and trigger notification duties. If you use letting agents or property software, your data sits in systems you do not control but remain responsible for.
An attack can also stop you trading. Ransomware on your accounts system can block rent collection, block maintenance payments, and leave you unable to access tenant records.
What a landlord cyber policy covers
Cover for landlords follows the standard cyber shape:
- Breach notification and the cost of telling affected tenants.
- Liability if tenant data is exposed or misused.
- Ransom and system recovery costs.
- Business interruption while your systems are down.
- Help from incident-response specialists from the first sign of attack.
The notification duty is the part landlords overlook. If tenant data is stolen, you may have to tell those tenants and, in serious cases, the regulator. The policy pays the cost and guides the process.
How it fits with landlord insurance
Landlord buildings and contents insurance does not cover cyber. Those policies handle physical damage and liability from the property, not data and systems. Cyber is a separate, standalone cover you add alongside your landlord policy.
If you run a letting agency or employ staff, your exposure grows, and you may need the broader business version of the cover. Our guide to landlord buildings versus contents insurance sets out the property covers, and cyber sits beside them rather than within them.
Steps to lower your risk
You can cut the chance of a claim with simple steps. Use multifactor authentication on email and banking, keep tenant data in as few places as possible, back up your records offline, and vet any agent or software you share data with. The National Cyber Security Centre offers free guidance for small operators.
Insurers assess your controls at renewal, so the same steps that reduce risk also improve your terms. Read how insurers price commercial risk in our guide to how insurers calculate risk and price cover.
Sources
- Financial Conduct Authority (FCA) — firm duties on customer data.
- National Cyber Security Centre (NCSC) — guidance for small operators.
- Association of British Insurers (ABI) — cyber cover and small operators.
- Insurers — how underwriters assess commercial risk.