Assessor Data Handling

Assessors collect data that is both personal and property-related: names and contact details, addresses, access arrangements, photographs of rooms and systems, measurements, and lodged certificate data that becomes part of a public or semi-public register. Handling that data properly means collecting only what the assessment purpose requires, using it only for that purpose and for lodgement where required, sharing it only with those who need it for legitimate purposes, and keeping it only as long as scheme, legal or legitimate business needs require. Those principles, drawn from data protection law, shape every stage of assessment, from booking to archiving.

Photographs deserve particular attention, because they can capture personal items, occupants, children, or documents that are not relevant to energy performance. A good assessor photographs building features, such as boiler data plates, window types and insulation, while avoiding personal items and occupants where possible, and explains why photographs are taken and where they will be stored. Clients who are concerned about photographs should raise that concern at booking, and assessors should accommodate reasonable requests, such as avoiding bedrooms where possible or agreeing what will be photographed, without compromising the evidence needed for lodged data.

Lodged data is a special case. Certificate data lodged on a register becomes available through public or professional search routes, as the register system provides, and clients should understand that lodgement is part of commissioning a certificate, not an optional extra. An assessor should explain, at booking or before lodgement, what data will be lodged, who can access it through the register, and how corrections work if lodged data is wrong. That explanation prevents later surprise when a buyer, tenant or researcher finds the certificate through search.

Retention and security complete the picture. Assessors and firms should store survey notes, photographs and lodged data securely, with access limited to those who need it, and should delete or archive data when retention periods expire, following scheme requirements. Clients should keep their own copies of certificates and relevant evidence, because assessor records may not be available indefinitely, and a client's own file is the durable record for future transactions and assessments.

Before an assessment, ask what data will be collected, why each item is needed, who will receive lodged data, and how long survey records will be kept. During the visit, note what is photographed and whether personal items can be moved or avoided. After the assessment, check the lodged entry for accuracy, and raise any data error promptly through the assessor and scheme correction routes, because lodged data errors affect future users as well as the client.

For assessors and firms, data handling should be documented: a privacy notice or booking explanation, a secure storage system, access controls, and a retention schedule aligned with scheme rules. Staff and subcontractors who handle data should understand those arrangements, and data should not be used for marketing or unrelated purposes without a lawful basis and, where required, consent. Good data practice is part of professional conduct, not an administrative burden to be minimised.

By place, data protection law and register access differ. UK assessors work under UK data protection law and devolved register arrangements, while EU certifiers work under the General Data Protection Regulation and national register rules. A client engaging an assessor abroad should check the national register access and data handling expectations, rather than assuming UK arrangements apply, and an assessor working across borders should follow the law for the property and the client concerned.

For multi-unit and rented buildings, data handling also involves landlords, agents and managers who may receive certificates and survey data. Each recipient should use data only for the legitimate purpose that justifies access, such as a transaction, a letting, management or enforcement, and should not circulate a full survey file, including photographs, more widely than that purpose requires.

A common mistake is to collect or share more data than the purpose requires, such as circulating full survey photographs to a marketing list, or retaining personal data indefinitely without a retention schedule. Another mistake is to refuse reasonable data concerns outright, damaging trust, when a brief explanation and a proportionate accommodation would have resolved them.

A further mistake is to assume that lodged public data has no privacy implications because it is public. Public register data still concerns a home and its occupants, and it should be used for legitimate purposes, not for intrusive or unrelated profiling, and clients should understand lodgement consequences before commissioning.

Keep the assessor's data explanation, the certificate, and any data correction correspondence together, with dates. That file shows what was collected, lodged and shared, and supports any later data query.

Questions to ask include: what data will you collect and lodge, who can access lodged data, and how long will you keep survey records. Those questions make data handling transparent.