Social Tenant Access to Information Requirements (STAIRs) vs Data Subject Access Requests (DSARs)

Transparency, accountability, and access to information are becoming increasingly important within the social housing sector. As expectations around openness continue to grow, housing providers must ensure tenants can access the right information through the correct processes.

Two key terms that social housing providers need to understand are STAIRs (Social Tenant Access to Information Requirements) and DSARs (Data Subject Access Requests).

Although both processes involve providing access to information, they serve different purposes. STAIRs focuses on improving transparency between landlords and tenants, while DSARs provide individuals with access to their personal data under data protection legislation.

Understanding the difference between STAIRs and DSARs is essential for housing providers to manage requests effectively, protect tenant information, and meet regulatory expectations.


What is STAIRs?

STAIRs (Social Tenant Access to Information Requirements) is a new regulatory framework designed to improve transparency between private registered providers of social housing and their tenants. The requirements are being introduced in phases, with publication requirements taking effect from 1 October 2026, followed by requirements for responding to tenant information requests from 1 April 2027.

The purpose of STAIRs is to give tenants and their representatives greater access to information about how their landlord operates, how services are delivered, and how decisions are made.

Unlike a DSAR, STAIRs does not focus on an individual’s personal data. Instead, it provides access to wider organisational information that helps tenants understand, monitor, and challenge the services they receive.

Examples of information that may be requested through STAIRs include:

  • Housing management policies and procedures
  • Service performance information
  • Repairs and maintenance information
  • Complaints processes and performance data
  • Health and safety information
  • Governance and decision-making information
  • Details about how housing services are delivered


What is a DSAR?

A DSAR (Data Subject Access Request) is a legal right under UK data protection legislation, including the UK GDPR and the Data Protection Act 2018.

A DSAR allows an individual to request access to the personal data an organisation holds about them.

The focus of a DSAR is the individual and their personal information, rather than wider organisational processes or service performance.

Examples of information that may be requested through a DSAR include:

  • Personal details held within housing records
  • Emails or correspondence containing personal information
  • Case notes relating to an individual
  • Records of decisions involving their personal data
  • Information held within housing management systems

The purpose of a DSAR is to help individuals understand what personal information is held about them, how it is being used, and whether it is being processed appropriately.


The difference between STAIRs and DSARs

The simplest way to understand the difference is:

STAIRs is about transparency. DSARs are about personal data.

For example:

“Can you provide information about your repairs performance, service standards, and repairs policy?”

This would generally be considered a STAIRs request because it relates to the organisation’s services and operations.

A DSAR focuses specifically on information relating to an individual.

For example:

“Please provide all records, correspondence, and notes you hold about my repair complaint.”

This would generally be considered a DSAR because it relates to the individual’s personal information.

While both processes support access to information, housing providers must understand which route applies to ensure requests are handled correctly.


Can a tenant submit both a STAIRs request and a DSAR?

Yes. A tenant may submit both a STAIRs request and a DSAR depending on the information they require.

Some requests may contain elements of both. For example, a tenant may request information about a landlord’s complaints process while also requesting copies of records relating specifically to their own complaint.

In these situations, housing providers must carefully review the request to determine what information is being requested and which obligations apply.

Having clear processes in place will help ensure tenants receive appropriate responses while protecting confidential and personal information.


Why understanding the difference between STAIRs and DSARs matters

For social housing providers, correctly identifying whether a request falls under STAIRs, a DSAR, or another information process is essential.

Failing to distinguish between the two could result in:

  • Delays in responding to tenants
  • Incomplete or unsuitable responses
  • Unintentional disclosure of personal information
  • Data protection risks
  • Reduced tenant confidence

STAIRs and DSARs require different approaches. While DSARs require careful management of personal data, STAIRs requires providers to consider how information about their services and operations is shared with tenants.

A wide range of teams may need to understand these differences, including:

  • Customer services teams
  • Complaints teams
  • Governance teams
  • Data protection teams
  • Tenant engagement teams

Ensuring colleagues understand their responsibilities will help providers respond consistently and effectively.


Preparing for STAIRs requirements: Why Housing Providers need to act now

Social housing providers should be reviewing their processes now to ensure they are prepared for increased expectations around transparency and tenant access to information.

The introduction of STAIRs will take place in phases, with key deadlines in October and April requiring providers to take action. These milestones will increase expectations around how information is published, managed, and made accessible to tenants.

Unlike DSARs, which focus on an individual’s personal information, STAIRs requires providers to consider their wider approach to transparency and openness.

Providers should prepare for:

  • Understanding what information tenants may request through STAIRs
  • Identifying how STAIRs requests differ from DSARs
  • Reviewing existing publication and transparency practices
  • Ensuring information is accurate, accessible, and regularly updated
  • Training colleagues to recognise different types of requests
  • Reviewing how STAIRs interacts with complaints, customer enquiries, and data protection processes
  • Establishing clear ownership for managing STAIRs requirements

Taking action early will help providers meet the October and April STAIRs deadlines, reduce operational pressure, and ensure tenants can access information through clear and consistent processes.


Conclusion

STAIRs and DSARs both provide routes for accessing information, but they serve very different purposes.

STAIRs focuses on transparency, giving social housing tenants greater insight into how providers operate, deliver services, and make decisions.

DSARs focus on personal data, allowing individuals to access information an organisation holds about them under data protection law.

Understanding the difference between STAIRs and DSARs will help housing providers respond appropriately, protect tenant information, and build trust through greater transparency.

Find out how TMW Resilience can help your organisation prepare for the upcoming STAIRs deadlines here.