Does the FTC Disposal Rule apply to landlords using consumer reports?
FTC guidance says the rule applies to people who use consumer reports for a business purpose, including landlords, and requires reasonable disposal measures.
An FTC-sourced workflow for inventorying, retaining, restricting, and securely disposing of consumer-report and applicant records at rental properties.
By Joseph “Joe” Pistone, NMLS# 2087918 · Originally prepared for August 20, 2026
Recovery and review note: Published to the site and reviewed against the cited primary sources on August 27, 2026. Article schema dateModified: August 27, 2026.
Inventory every place applicant and tenant information is stored, retain it only under a written legal and business schedule, restrict access, and use disposal practices appropriate to the sensitivity and medium. The FTC says its Disposal Rule applies to people who use consumer reports for a business purpose, including landlords, and requires reasonable measures against unauthorized access or use during disposal. DSCR financing does not change that duty.
| Record | Likely location | Control | Disposal evidence |
|---|---|---|---|
| Screening report | Vendor portal/email/download | Role access and download restriction | Deletion log/vendor confirmation |
| Paper application | Office/storage | Locked custody | Shredding certificate |
| ID or bank record | Device/cloud backup | Encryption and minimal copies | Verified erasure |
| Decision notice | Management system | Retention schedule/legal hold | Scheduled deletion record |
“If sensitive applicant data is downloaded for one decision, it should not live forever in personal email or a laptop folder. Map the copies, limit access, use a counsel-approved retention schedule and document secure disposal.”
— Joseph “Joe” Pistone, NMLS# 2087918
These sources establish legal or consumer-protection context, not DSCR program terms. Recheck current law and use qualified Florida professionals for the facts.
FTC guidance says the rule applies to people who use consumer reports for a business purpose, including landlords, and requires reasonable disposal measures.
Ordinary trash is not an appropriate default for readable sensitive reports. FTC guidance describes destruction methods designed so information cannot practicably be read or reconstructed.
Not necessarily. Copies may remain in trash, backups, email, synced devices or vendor systems. Use a verified disposal process appropriate to the medium.
Not automatically. A written retention schedule should account for legal requirements, claims, fair-housing/FCRA evidence, litigation holds and legitimate business needs, while avoiding needless retention.
Yes, but FTC guidance calls for due diligence in selecting and overseeing disposal service providers. Define responsibilities and keep evidence of completion.
Bring the address, contract, lease, ledger, operating records and known property issues for a documented financing conversation.
Secure applicationSchedule a conversation
Educational information only; not legal, tax, environmental, property-management or investment advice, a rate quote, approval, commitment or guarantee. Program and property decisions depend on complete review. Consult qualified professionals.