Introduction: the application file you sent to forty strangers
Try the mental exercise. The last time you looked for a place to live, how many times did you send out the same PDF? Twenty times? Forty? And what was in it?
A double-sided copy of your ID. Your last three payslips, with your social security number printed in the top right-hand corner. Your tax assessment notice, with your tax reference number and your reference taxable income. Your employment contract. Sometimes your bank statements. And, for good measure, the same complete bundle for your guarantor — that is, very often, your parents, who never asked for any of this.
You sent that bundle to agencies, to private individuals met through a listing, to potential sub-tenants, to a "flat hunter" you came across in a social media group, to online application platforms whose hosting provider and retention policy you knew nothing about. You never got a single copy back. You have no idea where they are today.
Along with banking procedures, this is probably the moment in adult life when we most massively hand our complete identity to unverified third parties. And it is a moment when we dare refuse nothing, because the balance of power is crushing: in high-demand areas, a hundred applicants compete for the same one-bedroom flat, and asking a question about the GDPR comes across as arrogance.
This guide is not an invitation to confrontation. It is an invitation to know exactly which documents can lawfully be required — the list exists, it is short, it is exhaustive — and to adopt a few habits that reduce your exposure without reducing your chances of getting the place.
The basic rule: a closed list, not an à la carte menu
Many applicants are unaware of it: the landlord does not freely choose the documents they demand. The ALUR Act of 24 March 2014 provided for a decree setting out the list of documents that may be required. That decree is decree no. 2015-1437 of 5 November 2015, still in force.
This text is exhaustive. Anything not listed in it cannot lawfully be requested, either from the prospective tenant or from their guarantor.
What can be required from the applicant
| Category | Permitted examples |
|---|---|
| Identity | ID card, passport, driving licence, residence permit |
| Current address | Last three rent receipts, proof of accommodation, latest property tax notice |
| Professional activity | Employment contract, employer's certificate, Kbis extract, student card |
| Income | Last three payslips, tax assessment notice, proof of social benefits, pension or annuity |
One document per category is enough under the logic of the decree: an agency cannot pile up every item in the right-hand column at once.
What is explicitly prohibited
Article 22-2 of the Act of 6 July 1989, as amended by the ELAN Act, lists the prohibited requests. Among the most common — and the most regularly violated:
- bank account statements;
- a certificate stating that you have no outstanding loans;
- a direct debit authorisation;
- bank details (RIB) at the application stage;
- a copy of your health insurance card or your social security number;
- a criminal record extract;
- a marriage contract, cohabitation certificate or family record book;
- your personal medical file;
- a character reference from your previous landlord;
- an ID photograph (other than on an official document);
- a handwritten income declaration or a reservation cheque.
Since the ELAN Act of 2018, demanding any of these documents exposes the landlord or estate agent to an administrative fine of up to €3,000 for an individual and €15,000 for a legal entity. The penalty exists. It is simply rarely applied, for lack of reports.
So the right question is not "am I entitled to refuse?" — you are. It is "how do I refuse without losing the flat?". The rest of this guide tackles exactly that.
Why it really matters: the afterlife of your application file
One could object that a payslip is hardly a state secret. The objection doesn't hold up, for three reasons.
First, a rental application file is a ready-made identity theft kit. Double-sided ID + proof of address + tax document: that is precisely the combination required to open an online bank account, take out a consumer loan or activate a mobile line. France's consumer protection agency (DGCCRF) and Cybermalveillance.gouv.fr regularly document frauds built around fake rental properties: the scammer posts an attractive listing, collects dozens of complete files, rents nothing out, and sells the lot on.
Second, nobody deletes anything. The GDPR requires a retention period limited to the purpose pursued. The CNIL considers that the files of unsuccessful applicants must be deleted shortly after the property is allocated — unless there is explicit consent to remain in a pool of candidates. In practice, the attachments sit for years in personal mailboxes, shared agency folders and phones.
Third, aggregation creates information you never intended to give. Your tax notice doesn't merely reveal an income: it reveals a family situation, a number of tax shares, sometimes maintenance payments made or received. Cross-referenced with your current address and employer, it sketches a complete profile — the kind we describe elsewhere on this site when we talk about metadata.
Seven concrete habits for applying without handing over everything
1. Watermark every document, systematically
This is the one move that changes everything, and it takes thirty seconds. On each scanned document, add a diagonal, semi-transparent note along the lines of:
Copy provided on 26/08/2026 to [agency name] — sole purpose: rental application, 3 rue X — reproduction prohibited
This note does not physically prevent fraud, but it makes the document unusable for most misuses (a bank will reject a watermarked ID for opening an account) and it traces the leak: if your ID card resurfaces elsewhere, you know where it came from. Mobile scanning apps include this feature, and any photo editing software will do the job.
The public service FranceConnect also offers, through the ANTS scheme, the generation of a digital copy of your ID document bearing a purpose statement. Use it when available.
2. Never send a full ID document on first contact
The first exchange is there to secure a viewing, not to close a deal. At that stage, a summary sheet is more than enough: first name, employment status, monthly net income, household composition, whether or not you have a guarantor. No serious agency refuses a viewing on that basis.
Save the full documents for the moment the property is actually offered to you. That is the tipping point: you go from being one applicant among a hundred to an identified counterpart, and the balance of power becomes markedly less unfavourable.
3. Redact what doesn't need to be read
On a payslip, the landlord needs to check an income and an employer. They need neither your social security number, nor your bank account number, nor the details of your absences or your supplementary insurance contributions. These can be blacked out.
Careful: redact before exporting to PDF, not with a black rectangle laid on top in a tool that keeps the text layer underneath. A badly applied block can be removed in two clicks. The safest method is still to print, redact with an opaque permanent marker, then rescan — a compact portable scanner makes this quick when you have ten documents to process.
4. Check that your contact actually exists before sending anything
Three checks, five minutes:
- Agency: the "Transaction" or "Gestion" professional licence number issued by the Chamber of Commerce, which must appear on their documents. Cross-check it against the commercial register.
- Private landlord: does the name given match the actual owner? A cadastral extract and a property title search request from the land registry office will confirm it — it costs money, but it's worth it for a long lease.
- Listing: a photo recycled from another advert, rent 30% below market rate, insistence on communicating only via encrypted messaging and never arranging a viewing are the three classic warning signs of a fictitious-property scam.
5. Use a dedicated email address and phone number for your search
Create an email address reserved for your house hunt. It will receive cold marketing for years — home insurance, removal firms, energy suppliers, mortgage brokers — which will tell you precisely who resold your contact details.
Same logic for the phone. A secondary number stops your main line ending up in the prospecting databases of ten agencies. And when it's simply a matter of confirming a viewing time, flagging a delay or following up without exposing your line, an SMS with a masked sender does the job without opening a permanent channel. The service behind this site exists precisely for that kind of one-off use: passing on useful information without your number becoming one more entry in a database.
6. Refuse unlawful requests — in writing, and politely
The wording matters more than the substance. Compare:
❌ "That's illegal, I know my rights."
✅ "Hello, I am sending you all the documents provided for by the decree of 5 November 2015: identity, address, professional activity, income. Bank statements are not among them and I would prefer to stick to that list. Let me know if anything is missing from the documents that can be required and I'll send it over today."
The second version signals awareness of the legal framework without accusing anyone, and offers immediate cooperation. In the vast majority of cases, the agency doesn't push — because it knows it is in the wrong and that a solid application is worth more than a dispute.
If you are explicitly refused the property because of that refusal, note it down precisely in writing. A running log kept throughout the search — a simple hardback notebook will do — is worth far more than a vague memory three months later.
7. Request deletion afterwards
The GDPR gives you a right to erasure (Article 17). Once the property has been allocated — to you or someone else — send a written request to the organisations holding your file:
"In accordance with Articles 15 and 17 of the GDPR, I request written confirmation within one month of the deletion of the documents submitted as part of my application for the property located at [address], my application having been unsuccessful / the lease having been signed."
If there is no reply after a month, filing an online complaint with the CNIL takes ten minutes. It is the cumulative effect of such reports that counts: the CNIL has already issued formal notices to property professionals for excessive collection and unlawful retention periods.
The special case of the guarantor: two private lives for one flat
This is the blind spot of the whole subject. When a student applies, two complete files circulate: theirs and their parents', often with income, assets and an address that have nothing to do with the tenancy.
The same rules apply to the guarantor: exhaustive list, identical prohibitions. Three additional precautions:
- the guarantor watermarks their own documents in their own name, mentioning the property concerned and the tenant's name;
- the guarantor never sends anything directly to an unidentified third party: they send it to the applicant, who centralises everything;
- if the application is rejected, the guarantor also exercises their right to erasure — it is their file, not their child's.
Public schemes such as Visale, the free guarantee offered by Action Logement, have a quiet merit on this front: they replace the full family file with a simple certificate, which mechanically shrinks the exposure surface.
After moving in: the second wave
Getting the keys doesn't close the matter. Moving in triggers a second round of data collection: energy supplier, internet provider, home insurance, change of address, possibly a building management company.
A few simple safeguards:
- A change of address is not broadcast automatically. The government's online service lets you choose exactly which organisations receive it. Don't tick everything out of convenience.
- A home insurance contract requires neither an inventory of your valuables nor photographs of your interior for a standard policy — those are only needed for specific cover, and you can keep them on your side in a digital document safe rather than handing them over in advance.
- The letterbox remains a physical leak point: mail from your energy supplier, your bank and government bodies arrives there under your exact name. A secure, standard-compliant letterbox and a cross-cut shredder for mail you don't keep close the loop where many people forget it.
- The inventory of fixtures is the one document where being exhaustive protects you: photograph everything, timestamp it, keep your own copy. It is the item that will spare you an unjustified deduction from your security deposit.
Summary: the cautious applicant's checklist
| Stage | Habit | Purpose |
|---|---|---|
| Before contact | Dedicated email address and phone number | Isolate the search from the rest of your digital life |
| First exchange | Summary sheet with no attachments | Secure the viewing without handing over your identity |
| After the viewing | Watermarked documents, unnecessary data redacted | Limit misuse |
| Unlawful request | Courteous written refusal citing decree 2015-1437 | Set the boundary without breaking off |
| After the decision | GDPR erasure request | Prevent indefinite retention |
| No reply | Online CNIL complaint | Create a collective record |
Conclusion: scarcity does not abolish the law
The knockout argument, in a queue of a hundred applicants, is silence: "if it doesn't suit you, the next person will accept". That's true in the short term. It's false over the course of a renting life, in which you apply dozens of times, each file leaves a copy somewhere, and the probability that at least one of those deposits ends badly rises with every submission.
The 2015 decree was not written to annoy landlords. It was written because lawmakers observed that the housing shortage was turning applications into a boundlessly intrusive examination. The texts exist, the penalty exists, the right to erasure exists. What is missing is their use.
Looking for a home in 2026 means agreeing to make yourself legible — that is the very principle of proving you can pay. It does not mean agreeing to become transparent, indefinitely, to forty contacts whose exact names, servers and intentions you know nothing about. Between the two lies a considerable margin. It comes down to a few minutes of preparation per application.
