Owner Portal: Profiled Access and Privacy

The owner portal is convenient but exposes data that must be protected: financial statements, shares, arrears, documents and communications. The baseline rule is profiled access: each user must see only the data that concerns them plus common information, never the financial position of other owners. Applying the principle of least privilege, authenticating access robustly and logging operations are the measures that make the portal compliant with EU Regulation 2016/679.

Why the portal is delicate processing

The portal brings together identifying data, accounting data and sometimes information revealing financial difficulty, such as arrears status. Making this data accessible without filters, or showing it to those not entitled, is unlawful processing and a source of conflict. Online availability multiplies the risk surface compared with paper: a configuration error can expose in a few clicks information that should remain confidential. That is why access profiling is the first security measure to design.

The principle of least privilege

Least privilege means granting each profile only the permissions strictly necessary. The owner sees their own situation, the condominium's general documents and communications addressed to them. The manager and their authorized staff have a broader view, but differentiated by role. A committee member or an auditor may have specific, temporary access. Defining these levels explicitly prevents everyone, for convenience, from having full visibility, which is the most frequent and dangerous mistake.

• Owner: own position, common documents, own communications
• Manager and staff: access differentiated by task
• Committee members and auditors: specific, time-limited permissions
• No profile with full visibility by default

Authentication and credentials

Access to the portal must be protected by individual, never shared, credentials. It is good practice to require strong passwords and, where available, a second authentication factor for accounts with broad privileges. Temporary or first-access credentials must be treated as confidential, with an expiry and a mandatory change. Avoiding sending passwords in clear text over unprotected channels and not reusing the same credentials across different owners are simple steps that greatly reduce risk.

Logging access and operations

The accountability required by the GDPR is also shown through traceability. Recording who accesses and which significant operations they perform makes it possible to reconstruct any incidents and respond to data subject requests. Logs, however, must themselves be handled with measure: kept only for the necessary time, protected and not used for control purposes other than security. Proportionate logging is a safeguard, not surveillance of owners.

Notice and transparency toward owners

Those who use the portal have the right to know which data is processed, for what purpose and for how long. The privacy notice must be accessible from the portal itself and indicate controller, legal basis, data categories, retention times and how to exercise rights. If the portal is provided by an external party that processes data on behalf of the manager or the condominium, that provider must be appointed as processor with the agreement required under Article 28 GDPR.

The provider's technical security

Choosing a reliable provider is part of compliance. Measures to assess include encryption of data in transit and at rest, backups, separation of data between different condominiums, management of security updates and breach procedures. A well-designed portal applies data protection by design and by default, the two principles of Article 25 of the Regulation, so the user starts from a secure configuration without having to build it themselves.

A portal built for correct access

The difference between a risky portal and a compliant one lies in how it handles roles and visibility. AmministraPro offers an owners' restricted area with profiled access, where each person consults their own position and the documents they are entitled to, while the firm maintains separation between different condominiums. The portal features are described on the /funzioni page and the plans that include them on the /prezzi page, so you can offer transparency to owners without giving up on protecting their data.