30 Mar 2026 · 5 min read
Third-party PII in housing SARs: the TP-PII rule, explained
How SART identifies third-party tenant data in mixed correspondence and what it means for housing officers under UK GDPR.
The TP-PII rule
Third-party PII is any personal data identifying someone who is not the data subject of the SAR. In housing, that means neighbour complainants in ASB logs, other tenants named in repair callouts, family members in safeguarding notes, and so on.
Why it's hard
Bundles are mixed. A single record can name three people. Naïve redaction over-blacks; brittle redaction leaks. SART runs per-passage detection and flags mixed-subject passages for elevated review.
What you sign
Each TP-PII recommendation cites the third party and the housing context (tenancy, ASB, complaint). The reviewer accepts, overrides with reason, or escalates.