Data Privacy in CRE Tech: Navigating GDPR, CCPA, and Beyond

As commercial real estate technology evolves—from smart building systems to tenant engagement platforms—so do the risks and responsibilities around data privacy. This session explores how regulations like GDPR and CCPA impact the way CRE firms collect, store, and manage personal data across their portfolios. Attendees will gain practical insights into compliance strategies, operational safeguards, and ethical considerations that go beyond checkboxes. Some key areas can include: exploring the core principles of GDPR and CCPA, and how they apply to CRE operations, identify common data collection touchpoints in CRE tech (e.g., access control, leasing platforms, IoT devices), teach the audience how to audit tech stack for compliance risks, explore case studies of CRE firms implementing privacy-first practices, and checklist of questions to ask vendors and partners about data handling and security as a handout.