Guidance

Awaab’s Law Test and Learn research: Privacy notice

Published 18 December 2025

Applies to England

The following is to explain your rights and give you the information you are entitled to under UK data protection legislation.

1. The identity and contact details of the Ministry of Housing, Communities and Local Government (MHCLG) and our Data Protection Officer   

MHCLG is the data controller. The Data Protection Officer can be contacted at dpo@communities.gov.uk.

This research is being carried out by Verian on behalf of MHCLG. Verian are our data processors for this research.

2. What personal data we are collecting and why  

Your personal data is being collected as part of an evaluation of the first phase of Awaab’s Law in the social rented sector. Phase 1 of Awaab’s Law came into force on 27 October 2025 and means all social landlords must repair all emergency hazards within 24 hours and fix dangerous damp and mould within fixed timescales.

The purpose of this research is to obtain evidence on the effectiveness of the implementation of Phase 1 of Awaab’s Law, ensuring the regulations work in practice for both landlords and tenants. This research will help us consider any issues that have arisen from the delivery of the policy and inform the development of Phase 2 of Awaab’s Law.

This research will gather qualitative evidence by using in-depth interviews with tenants and structured focus groups with landlords.

Personal data will be used to invite you to participate in the research. It will also be used to understand how social landlords and tenants in different areas of the country have experienced Awaab’s Law.

The following personal data is being collected for the research:

Tenants:

• contact details: name, email and postal address, phone number
• demographic (some of which is referred to as special category data, i.e. sensitive data): age, date of birth, gender, ethnicity, family circumstances & household makeup, benefit receipt, and health
• housing-related information: street address, type of tenancy, landlord details, time spent living at the given address
• experience and case details e.g. correspondence with landlord

Social landlords:

• contact details: name, email and postal address, phone number
• job title and organisation details

Verian, who is the data processor, will process the data on our behalf. The data collected will be analysed and reported without details about individuals (any quotes will be anonymised and results reported at the group level).

3. Lawful basis for processing the data 

The data protection legislation sets out when we are lawfully allowed to process your data. The lawful basis that applies to this processing is Article 6(1)(e) of the UK GDPR – that it is necessary for the performance of a task carried out in the public interest.

For processing of special category data, we will rely on Article 9(g) of the UK GDPR - substantial public interest. The relevant substantial public interest condition in Schedule 1 of the DPIA 2018 is 6. Statutory and government purposes.  

4. With whom we will be sharing the data

We won’t share your personal data. Only anonymised data gathered during this research by interviews and focus groups will be used by MHCLG to inform future policy development for Awaab’s Law and social housing. We may share the overall findings with colleagues at other government departments but this will not include any personal data collected as part of this research project.

5. For how long we will keep the personal data, or criteria used to determine the retention period

Verian (MHCLG’s data processor) will keep your personal data and store them securely until the project ends (anticipated to be no later than end of May 2026) at which point Verian will securely destroy the data.

6. Your rights, e.g. access, rectification, erasure 

The data we are collecting is your personal data, and you have rights that affect what happens to it. You have the right to:

a. know that we are using your personal data

b. see what data we have about you

c. ask to have your data corrected, and to ask how we check the information we hold is accurate

d. complain to the ICO (see below)

In some circumstances you may also have the right to withdraw your consent to us having or using your data, to have all data about you deleted, or to object to particularly types of use of your data. We will tell you when these rights apply.

If you would like to exercise your rights please get in touch with the MHCLG DPO (contact details at the start of this privacy notice).

7. Sending data overseas

Your personal data will not be sent outside of the EU: it will be securely stored in the UK or EU by MHCLG and its processors.

8. Automated decision making

We will not use your data for any automated decision making.

9. Storage, security and data management

This research is being carried out by Verian on behalf of MHCLG. Verian are our data processors for this research.

Processes are in place to ensure the secure transfer, handling, storage, and destruction of the data by Verian. These processes are specified in MHCLG’s Data Processing Agreement with Verian.

MHCLG’s contract with Verian sets out requirements for cyber security processes. Verian have up to date cyber security clearance from MHCLG’s cyber security team.

MHCLG will only use your data within the terms of data protection laws, will delete your data securely and only keep it for as long as necessary for our work as a public body.

MHCLG will review dates for keeping personal details and data in the future. Where relevant, some data may be kept without personal details attached for longer periods.

10. Complaints and more information

When we ask you for information, we will keep to the law, including the UK General Data Protection Regulation and Data Protection Act 2018.

If you are unhappy with the way the Department has acted, you can make a complaint.

If you want to make a request to access your data, or another request in relation to your rights, or if you are not happy with how we are using your personal data, you can contact dataprotection@communities.gov.uk

If you still have a concern about the way in which MHCLG has handled your personal data you can contact the Information Commissioner’s Office to make a complaint using their website service or by telephoning 0203 123 1113. Further information about your data protection rights can also be found on the Commissioner’s website.