Practical guide
Managing keys and access in a condominium
Keys to common areas, from entrance doors to technical rooms and gate remotes, are shared condominium assets, and managing them without a system produces frequent disputes: untracked duplicates, locks changed without notice, access granted or denied inconsistently. Under the Italian civil code, the administrator is responsible for managing and preserving common parts, which includes overseeing access to them. This guide explains how to set up a key register, handle handovers and lock replacements, define liability for lost or stolen keys, and correctly handle personal data tied to access control, along with how a management platform like AmministraPro can make the whole process traceable.
Why a key register matters
A building without an up to date register of issued keys cannot say, after a break in or unauthorized entry, who can physically open the main door, the boiler room or the meter room. This exposes the administrator to claims about diligence in safeguarding common areas, a duty stemming from the administrator's general obligation to manage and preserve shared property.
For every key or remote handed out, the register should track the recipient (owner, tenant, contractor, cleaning staff), the handover date, an identifying number for the duplicate, and whether it was later returned. Without this traceability, every lock replacement becomes a decision made in the dark: nobody knows how many duplicates exist or who holds them.
- List of recipients with handover and return dates
- Numbered duplicates to identify them if lost
- Separate tracking for common area keys versus private unit keys
- Updates whenever a tenant changes or a unit is sold
Handover and return: correct practice
Handing over a key or remote should always come with a signed receipt, even an informal one, stating what was given and to whom: a simple form prevents later disputes over who holds what. When an owner sells a unit or a tenant moves out, returning common area keys should be verified before closing the account with the management.
For external contractors (cleaning companies, maintenance workers, gardeners), good practice limits handovers to keys for specific spaces only, avoiding master keys that open the entire building. If the condominium bylaws regulate access to technical rooms or common areas, key handovers must follow those provisions.
When to replace locks
Replacing locks on common areas is a decision that, barring urgency justified by a theft or a loss with a concrete security risk, generally falls among the maintenance works the assembly may need to approve, especially if it involves significant spending or a change of system (for example electronic badges replacing mechanical keys).
After a theft or loss of a key that opens common areas, prudence suggests promptly replacing the affected lock and controlling the redistribution of new duplicates, updating the register right away. Delaying replacement after a confirmed theft can expose the administrator to liability for failing to safeguard the property if damage follows.
- Theft or loss with concrete risk: prompt replacement
- Routine work or technology change: assembly resolution required
- Register updated at the same time as the replacement
- Prompt communication to residents about the new access method
Liability and access control systems
When a building adopts more sophisticated access control, such as badges, transponders or intercoms that log entries, privacy rules come into play: access logs can qualify as personal data under the GDPR, and processing them requires an adequate legal basis, information for residents, and retention limited to what is necessary. Video surveillance of common access points follows its own specific rules on signage and security purposes, distinct from simple key management.
Liability for safeguarding condominium keys and for the functioning of common access systems rests with the administrator in the exercise of their mandate, but the diligence required is that of a careful administrator: an up to date, traceable register that can be produced on request is the concrete evidence of having met that duty. Management platforms like AmministraPro let you keep the key register digitally, link it to owner and contractor records, and preserve the handover history in an organized way, reducing the risk of disputes over who has access to what.
Frequently asked questions
Who is responsible for keeping the condominium key register?
Keeping and updating the key register falls among the administrator's duties, since they are responsible for managing and preserving common areas. In practice the register can also be kept digitally, as long as it stays traceable and is updated with every handover or return. A platform like AmministraPro lets you link every issued key to the owner's or contractor's record, keeping a full history of movements.
Can the condominium refuse to hand over common area keys to a tenant?
As a rule, a tenant, as the qualified occupant of a unit, is entitled to access the common areas needed to enjoy the leased property, so a blanket refusal is not justified. Handover typically follows a request from the owner or from the tenant showing proof of the lease, following the same registration practice used for other recipients.
Who pays for lock replacement after keys are stolen?
If the replacement concerns common areas and results from an event affecting the whole building, such as a break in at the main entrance, the cost is generally split among owners according to their ownership shares, unless the bylaws set different criteria for specific works. If the loss instead stems from a single owner's or tenant's negligence in keeping their own key, the assembly or the bylaws can provide that the cost falls on that person.
Does access data from badges or intercoms need to comply with the GDPR?
Yes, when the system logs who enters and when, that data can qualify as personal data under the GDPR, and the condominium, through the administrator, must identify an adequate legal basis for processing, provide information to the residents concerned, and limit log retention to what is strictly necessary for the stated security purposes. It is advisable to document these choices so they can be shown if a data subject makes a request.
Is it worth replacing mechanical keys with an electronic system?
There is no legal requirement either way: choosing between traditional mechanical keys and electronic systems like badges or transponders is a management decision that, involving cost and a change in how every resident accesses the building, is normally put to the assembly. Typical advantages of an electronic system are automatic access tracking and the ability to deactivate a single lost badge without changing the whole lock, but these should be weighed against the privacy implications described above.
Try AmministraPro
Accounting, thousandths-based cost splitting, meetings, communications and artificial intelligence in a single Italian software, compliant with UNI 10801 and GDPR.