NRLA Level 3 Unit 1: Health, Safety & Security In Lettings — Study Guide

This is a free, independent study guide for Unit 1 of the NRLA Level 3 Certificate in Managing Property & Residential Lettings (MNRLA): Health, Safety & Security in Lettings. It covers the four areas the unit assesses — legal duties for health and safety, lone working risks and procedures, property security, and GDPR principles — with a revision summary and self-test quiz at the end.

This guide is produced by RentalReady UK to support your revision. It is not official NRLA course material and does not replace the NRLA’s own learning content or assessment.

← Back to the NRLA Level 3 Study Hub

Legal Duties For Health & Safety

Landlords and agents have overlapping duties under general health and safety law and property-specific regulations. The starting point is the Health and Safety at Work etc. Act 1974, which places a general duty on anyone conducting a business, including letting and managing property, to ensure the safety of people affected by that work. This is supported by the Management of Health and Safety at Work Regulations 1999, which require a suitable risk assessment of work activities.

On top of this general duty, several property-specific regulations apply to rented homes:

• Gas Safety (Installation and Use) Regulations 1998 — an annual gas safety check by a Gas Safe registered engineer for any gas appliance, flue or pipework the landlord is responsible for, with a copy of the certificate given to tenants
• Electrical Safety Standards in the Private Rented Sector (England) Regulations 2020 — electrical installations must be inspected and tested at least every 5 years, with a satisfactory report (EICR) provided to tenants
• Smoke and Carbon Monoxide Alarm (England) Regulations — a smoke alarm on every storey used as living accommodation, and a carbon monoxide alarm in any room with a fixed combustion appliance (excluding gas cookers), tested at the start of every new tenancy
• Housing Health and Safety Rating System (HHSRS) — the framework local authorities use to assess 29 categories of hazard in a property, from damp and mould to excess cold and structural safety
• Regulatory Reform (Fire Safety) Order 2005 — applies to the common parts of HMOs and blocks of flats, requiring a fire risk assessment and appropriate fire precautions

Landlords with a water system, such as a cold water storage tank, also have a duty under the Health and Safety Executive’s Approved Code of Practice (ACOP L8) to assess and control the risk of Legionella bacteria, even though a full written risk assessment is not always required for a typical domestic system.

Lone Working Risks And Procedures

Property viewings, inspections and maintenance visits routinely involve staff or landlords attending unfamiliar properties alone, often meeting people they have not met before. The Health and Safety at Work Act duty extends to protecting employees and self-employed workers who work alone, and the HSE expects a specific risk assessment for lone working activities.

• assess each activity for risk before it takes place — an empty property viewing with a stranger carries different risk to a routine inspection of an existing tenant’s home
• share schedules and property addresses with a colleague or manager, including expected arrival and finish times
• use a check-in and check-out system, with an agreed escalation process if someone does not check in as expected
• avoid handling large amounts of cash alone wherever possible, and vary routines and routes for regular visits
• carry a charged phone and consider a personal safety app or alarm for higher-risk visits
• trust instinct — staff should be trained and empowered to leave a situation that feels unsafe, without needing permission first

Property Security

Security sits alongside safety and often overlaps with a landlord’s wider legal duties. Most UK home insurers require external doors to be fitted with a five-lever mortice deadlock meeting British Standard BS 3621, and failing to meet this standard can invalidate a buildings insurance claim after a break-in.

• fit key-locking window locks, particularly on ground floor and easily accessible windows
• working smoke and carbon monoxide alarms are both a safety requirement and a practical security measure, since they are commonly checked after any incident
• manage keys carefully — use a key safe with a changeable code rather than leaving keys with contractors or under mats, and keep a log of who holds keys to each property
• in HMOs, communal areas need working door entry systems and fire doors that are not wedged open, since these affect both security and fire safety compliance
• external security lighting on shared access routes reduces risk for both residents and anyone attending the property for viewings or maintenance

Responsibility for security is generally split: landlords are responsible for the structural security of the property (locks, doors, windows) at the start of the tenancy, while tenants are usually responsible for day-to-day security, such as locking up and not sharing keys, once they are in occupation.

GDPR Principles

Landlords and agents handle sensitive personal data throughout the letting process, from referencing and credit checks to bank details and, in some cases, information about a tenant’s health or immigration status. This is governed by the UK GDPR and the Data Protection Act 2018.

• personal data can only be processed where there is a valid lawful basis, such as the tenant’s consent, the necessity of processing to perform the tenancy contract, or a legal obligation
• only collect the data actually needed for the purpose (data minimisation), and do not keep it for longer than necessary once the tenancy has ended
• tenants have a right to access the personal data held about them (a subject access request) and, in many cases, a right to have inaccurate data corrected or erased
• most letting agents, and many landlords, must register with the Information Commissioner’s Office (ICO) and pay an annual data protection fee, typically £40 a year for a small business with fewer than 10 staff, with failure to register risking a penalty
• a notifiable personal data breach, such as a lost laptop containing tenant records, must generally be reported to the ICO within 72 hours of becoming aware of it
• referencing agencies and credit reference checks require the tenant’s informed consent before checks are carried out

Download the free printable revision checklist for this unit: NRLA Level 3 Unit 1 Revision Checklist (PDF)

Revision Summary — Key Facts For Unit 1

• General duty: Health and Safety at Work etc. Act 1974 + Management of Health and Safety at Work Regulations 1999 (risk assessments)
• Gas safety check: every 12 months, by a Gas Safe registered engineer, certificate given to tenants
• Electrical (EICR): inspected/tested at least every 5 years under the 2020 Regulations
• Smoke alarms: every storey used as living accommodation; CO alarms: any room with a fixed combustion appliance
• HHSRS: local authority framework covering 29 categories of housing hazard
• Fire Safety Order 2005: applies to HMO/block communal areas, requires a fire risk assessment
• Legionella: landlords should assess and control risk under HSE ACOP L8
• Lone working: requires its own risk assessment — check-in systems, shared schedules, avoiding solo cash handling
• Locks: BS 3621 five-lever mortice deadlocks are the standard most insurers require
• Security responsibility split: landlord = structural security at start of tenancy; tenant = day-to-day security during occupation
• UK GDPR / Data Protection Act 2018: need a lawful basis to process data, keep only what’s needed, data breach reporting within 72 hours
• ICO registration: typically required, around £40/year for a small business

Self-Test Quiz

Test yourself with these 10 multiple-choice questions, in the same style as the real NRLA assessment. Answers are listed at the bottom — no peeking until you’ve had a go.

1. Which Act sets out the general legal duty for health and safety at work in England and Wales?
   a) Housing Act 2004  b) Health and Safety at Work etc. Act 1974  c) Landlord and Tenant Act 1985  d) Equality Act 2010
2. How often must a gas safety check be carried out on a rented property with gas appliances?
   a) Every 6 months  b) Every 12 months  c) Every 2 years  d) Only when a tenant moves in
3. What British Standard do most UK home insurers expect external door locks to meet?
   a) BS 5839  b) BS 3621  c) BS 7671  d) BS 8103
4. Within how many hours must a notifiable personal data breach generally be reported to the ICO?
   a) 24 hours  b) 48 hours  c) 72 hours  d) 7 days
5. What is the main purpose of a lone working risk assessment?
   a) To reduce insurance premiums  b) To identify and reduce risks to personal safety when working alone  c) To satisfy tenant referencing rules  d) To calculate rent increases
6. Under the 2020 Regulations, how often must electrical installations in a rented property be inspected?
   a) Every year  b) Every 3 years  c) At least every 5 years  d) Only when installed
7. What framework do local authorities use to assess housing hazards such as damp, cold and structural safety?
   a) EPC rating  b) HHSRS  c) EICR  d) ACOP L8
8. Roughly how much is the typical annual ICO data protection fee for a small property business with fewer than 10 staff?
   a) £10  b) £40  c) £250  d) £1,000
9. Which regulations require landlords to fit carbon monoxide alarms in rooms with a fixed combustion appliance?
   a) Gas Safety Regulations 1998  b) Smoke and Carbon Monoxide Alarm Regulations  c) Fire Safety Order 2005  d) HHSRS
10. What does ACOP L8 guidance primarily help landlords assess and control the risk of?
    a) Electrical faults  b) Legionella bacteria in water systems  c) Data breaches  d) Fire spread in communal areas

Answers

1. b — Health and Safety at Work etc. Act 1974
2. b — Every 12 months
3. b — BS 3621
4. c — 72 hours
5. b — To identify and reduce risks to personal safety when working alone
6. c — At least every 5 years
7. b — HHSRS
8. b — £40
9. b — Smoke and Carbon Monoxide Alarm Regulations
10. b — Legionella bacteria in water systems

← Back to the NRLA Level 3 Study Hub for the other units and revision materials.