Joseph Pistone · NMLS# 2087918 · CrossCountry Mortgage, LLC · NMLS# 3029(941) 260-3051
Tenant Data Security

How Should a Florida DSCR Landlord Dispose of Tenant Screening Records?

An FTC-sourced workflow for inventorying, retaining, restricting, and securely disposing of consumer-report and applicant records at rental properties.

By Joseph “Joe” Pistone, NMLS# 2087918 · Originally prepared for August 20, 2026

Recovery and review note: Published to the site and reviewed against the cited primary sources on August 27, 2026. Article schema dateModified: August 27, 2026.

Direct answer

Inventory every place applicant and tenant information is stored, retain it only under a written legal and business schedule, restrict access, and use disposal practices appropriate to the sensitivity and medium. The FTC says its Disposal Rule applies to people who use consumer reports for a business purpose, including landlords, and requires reasonable measures against unauthorized access or use during disposal. DSCR financing does not change that duty.

Tenant-data lifecycle workflow

  1. Inventory: map applications, IDs, reports, scores, bank/pay records, adverse-action notices and communications across email, portals, devices, paper and vendors.
  2. Minimize: stop collecting fields that are not needed for a lawful process and prevent duplicate local downloads.
  3. Classify access: limit records to people with a defined role; remove access promptly when managers or vendors change.
  4. Set retention: have counsel establish periods based on fair-housing, FCRA, tax, litigation-hold and business needs; document exceptions.
  5. Dispose securely: FTC examples include burning, pulverizing or shredding paper and destroying or erasing electronic media so information cannot practicably be read or reconstructed.
  6. Control vendors: perform due diligence and contract for appropriate disposal; retain certificates or other evidence without assuming outsourcing ends responsibility.
  7. Test: sample expired records across systems, verify deletion and document remediation.

Record map

RecordLikely locationControlDisposal evidence
Screening reportVendor portal/email/downloadRole access and download restrictionDeletion log/vendor confirmation
Paper applicationOffice/storageLocked custodyShredding certificate
ID or bank recordDevice/cloud backupEncryption and minimal copiesVerified erasure
Decision noticeManagement systemRetention schedule/legal holdScheduled deletion record

Joe’s Advice

“If sensitive applicant data is downloaded for one decision, it should not live forever in personal email or a laptop folder. Map the copies, limit access, use a counsel-approved retention schedule and document secure disposal.”

— Joseph “Joe” Pistone, NMLS# 2087918

Primary sources

  1. FTC: Disposing of Consumer Report Information? Rule Tells How
  2. FTC: Disposal Rule
  3. FTC: Using Consumer Reports—What Landlords Need to Know
  4. FTC: Protecting Personal Information—A Guide for Business

These sources establish legal or consumer-protection context, not DSCR program terms. Recheck current law and use qualified Florida professionals for the facts.

Frequently asked questions

Does the FTC Disposal Rule apply to landlords using consumer reports?

FTC guidance says the rule applies to people who use consumer reports for a business purpose, including landlords, and requires reasonable disposal measures.

May a landlord simply place screening reports in the trash?

Ordinary trash is not an appropriate default for readable sensitive reports. FTC guidance describes destruction methods designed so information cannot practicably be read or reconstructed.

Does deleting a file icon prove tenant data is gone?

Not necessarily. Copies may remain in trash, backups, email, synced devices or vendor systems. Use a verified disposal process appropriate to the medium.

Should every applicant record be deleted immediately?

Not automatically. A written retention schedule should account for legal requirements, claims, fair-housing/FCRA evidence, litigation holds and legitimate business needs, while avoiding needless retention.

Can a property manager or shredding vendor handle disposal?

Yes, but FTC guidance calls for due diligence in selecting and overseeing disposal service providers. Define responsibilities and keep evidence of completion.

Related Florida DSCR resources

Review the actual Florida rental

Bring the address, contract, lease, ledger, operating records and known property issues for a documented financing conversation.

Secure applicationSchedule a conversation

Educational information only; not legal, tax, environmental, property-management or investment advice, a rate quote, approval, commitment or guarantee. Program and property decisions depend on complete review. Consult qualified professionals.