Stonewater Limited · Case 202340149 · 25 February 2026
Stonewater Limited — case 202340149
The complaint about the landlord's handling of concerns regarding data storage and security of resident data in its office was found to be outside the Housing Ombudsman's jurisdiction, as it does not relate to the resident's application for or occupation of a property and falls under the Information Commissioner's Office remit.
Findings by complaint head
-
Handling of concerns about data storage
Outside jurisdictionThe complaint concerned the security of resident data in the landlord's office, which does not relate to the resident's application for or occupation of a property. The matter falls under the Information Commissioner's Office remit, so it is outside the Housing Ombudsman's jurisdiction.
The full determination
Decision Case ID 202340149 Decision type Jurisdiction Landlord Stonewater Limited Landlord type Housing Association Occupancy Assured Tenancy Date 25 February 2026 Background The resident found the landlord’s office door unlocked which had data for residents on a laptop, including bank and medical information. He was unhappy with the possible breach of data and the landlord’s response to his concerns. What the complaint is about The complaint is about the landlord’s handling of the resident’s concerns about data storage in its office.
Our decision (determination) We have found the complaint is outside of our jurisdiction. As a result, we have not investigated it. Summary of reasons What we can and cannot consider is set out in the Housing Ombudsman Scheme (the Scheme). For us to investigate the complaint, it must relate to the landlord’s actions or omissions which have affected the resident in respect of their application for, or occupation of, a property. The complaint made to the landlord and then referred to us, concerned the security, or the lack thereof, of data concerning the residents in the block.
The matters were not in relation to the application for the resident’s property or the occupation of their property. This means the complaint is outside of our remit to consider. We may also not consider complaints that fall under another regulator’s remit. The Information Commissioner’s Office (ICO) is an independent body responsible for assessing whether organisations have complied with data protection provisions. They may consider concerns about data security and potential data breaches.
As the resident’s concerns relate solely to the security of resident data, the matter is outside of our jurisdiction.
This is a structured summary of a published determination. The official decision is the authoritative record. Contains public sector information licensed under the Open Government Licence v3.0.