Landlord asks for ID: what's allowed in 2026?

A potential live-in landlord (called a hospita in Dutch) asking for your passport feels familiar. After all, this is someone who is about to hand keys to her own home to a stranger, so wanting some certainty about who you are seems reasonable. But there are limits. The General Data Protection Regulation also applies to private landlords, and the rules are stricter than many landlords realise.

This article explains what a landlord is and is not allowed to ask, how to share your identity safely without giving up your BSN or photo, and what to do when a landlord goes further than the law permits.

Why do landlords ask for an ID document?

A live-in landlord renting out a room has three common reasons to ask for ID:

Identity verification. Who is this person, and are they really who they say they are? At a viewing night, everyone passes by briefly, so an ID check helps confirm the name on the upcoming contract matches the person who walked in.

Administrative contract signing. A valid written rental agreement needs both parties identified by full name, date of birth, and place of birth. All of these typically appear on an ID document.

Solvency screening. Some landlords want confirmation that the tenant is actually employed or studying. That part is separate from the ID document itself and is usually proven through an employer statement or student card.

In practice, though, landlords often go much further than is legally defensible. Saving a full passport copy on a personal Google Drive, demanding a photo of a driving licence before the viewing, or noting BSN numbers in a spreadsheet of all applicants. That kind of data processing falls under GDPR and has clear rules.

What does GDPR say about ID checks for room rentals?

The Dutch Data Protection Authority, the regulator that enforces GDPR in the Netherlands, has published clear guidance on ID documents in rental contexts: a copy of the ID is in most cases not needed. Inspecting it (showing the document so the landlord can verify) is enough. Only when an actual rental contract is being signed can a landlord demonstrate a lawful basis for recording specific data from the ID document.

The central principle is called "purpose limitation". A landlord may only collect personal data that is strictly necessary to enter into and execute the rental agreement. During screening of twenty applicants, that means: your name and contact details only. Not your passport number, not your BSN, not your photo.

What information can a landlord lawfully collect?

When you are seriously in the running as a future tenant, a landlord may reasonably ask for:

• Full name, address, contact details. Standard for any contract.
• Employer or study programme. For verifying income or student status.
• Income indication or evidence of financial stability. Not always required, but lawful for higher rental prices.
• Reference from previous landlord. Optional, not legally required.
• Identity verification by showing ID in person. Not automatic copying.

At the moment of signing the actual rental contract, a landlord can request heavier verification, for example a redacted copy of the ID document with BSN and photo blacked out. Demanding a full unredacted copy before that point is disproportionate.

How do you share your ID safely with a potential landlord?

The Dutch government has released a free tool for exactly this purpose: the KopieID app from the Ministry of the Interior. The app lets you photograph your passport or driving licence and then automatically redact the sensitive parts.

Concrete steps:

1. Download the KopieID app from the App Store or Play Store (free, built by the Dutch government).
2. Take a photo of your ID document inside the app.
3. Redact BSN and photo inside the app itself.
4. Add a watermark with the date and intended purpose.
5. Save the redacted version or send it directly.

If the landlord refuses to accept a redacted copy and insists on the full version, that is a strong signal to walk away. A landlord who does not work in line with GDPR on this point probably falls short in other areas too.

What if a landlord demands a full copy anyway?

In practice, some landlords still demand a full unredacted copy of your ID as a condition for a viewing or contract. That is, in most cases, not legally valid.

Step 1, ask for the legal basis. A landlord processing personal data must explain why it is necessary and which GDPR processing ground applies (consent, performance of contract, legitimate interest). If you do not get a clear answer, that is suspicious in itself.

Step 2, offer a redacted copy. Explain that, in line with the Dutch Data Protection Authority's advice, you provide a copy with BSN and photo blacked out.

Step 3, walk away if the landlord persists. A landlord who forces you to share your BSN unredacted with a stranger is not a safe rental counterparty. There are more rooms on the market. Our tenant rights guide for the Netherlands explains the broader rights framework you can lean on.

Step 4, file a report with the Data Protection Authority. If you suspect a structural pattern of abuse, you can file a complaint via autoriteitpersoonsgegevens.nl. That does not directly help you, but it does protect future tenants from the same landlord. Our hospita hub maps the whole landlord-tenant relationship for live-in arrangements specifically.

What if a landlord misuses your data?

Suppose you have already shared your ID and afterwards notice that the landlord has done something irresponsible: a group chat with all applicants' ID copies, a shared Drive folder that turned out to be public, or your data passed to a third party without consent. What now?

• Right to access and erasure. Under GDPR you have the right to ask what data an organisation holds on you, and to have it erased on request.
• Complaint to the Data Protection Authority. Concrete situations with documented violations can be reported.
• Compensation. In serious cases a court can award damages, especially if identity fraud followed the leak.

Prevention is better than cure. A landlord with only a redacted copy can do far less damage than one holding your full passport plus photo.

How does a landlord verify identity without a copy?

Some landlords claim they have no other option than a full copy. That is not true. Safe alternatives include:

• Showing ID in person at the viewing. The landlord notes name, date of birth, and document number in her own records, with no photocopy. Our room viewing questions checklist explains how the conversation around verification can go in practice. For broader Dutch room rental search advice see the main guide.
• Showing ID at contract signing. The landlord verifies on the spot and records relevant data, no copy needed.
• DigiD-based services. For more professional landlords, commercial identity-verification services (often via DigiD integration) are available, paid for by the landlord.

Want a safer platform for the whole search and viewing process? On Huismaatje you find rooms and housemates without having to share your passport before you have an actual match.

Frequently asked questions

Can a landlord demand a full copy of my passport for a viewing?

Almost never. GDPR requires a proportionate purpose for processing personal data. Demanding a copy before a rental contract is in sight is generally not proportionate and therefore not allowed.

Is it illegal to hand over my BSN unredacted to a landlord?

Not explicitly illegal, but very unwise and almost always unnecessary. The BSN (Dutch social-security number) is sensitive and may only be processed by employers, banks, healthcare providers, and the government. A landlord rarely needs it.

What is the KopieID app and where do I download it?

KopieID is a free app from the Dutch Ministry of the Interior. You find it in the App Store and Google Play Store under "KopieID". The app lets you redact BSN and photo and add a watermark.

Can a landlord scan my ID document at a viewing?

At a viewing, scanning is disproportionate. Visual inspection is enough. Only when signing a contract can targeted processing (with redaction) be appropriate.

What do I do if I have already shared a full copy?

Request deletion under GDPR. If the landlord no longer needs the copy, they must erase it within a reasonable period. If you receive no response, that itself is a GDPR violation.

Can I file a GDPR complaint anonymously?

No, a complaint to the Dutch Data Protection Authority requires you to identify yourself as the complainant. However, your name is not automatically shared with the landlord; the Authority first assesses whether the case warrants investigation.

Does a landlord have a data-breach reporting duty if my ID leaks?

Yes. If personal data unintentionally reaches third parties (a data breach), the data controller must notify the Data Protection Authority. This also applies to private landlords who process your data.