# Running a recurring data audit that catches drift before deals do
A regional mall's occupancy feed said 94% leased. The actual number, confirmed three weeks later during due diligence, was 81%. The gap wasn't fraud. It was a property management system that hadn't synced a batch of lease terminations for two quarters. By the time anyone noticed, the asset had already been marketed to buyers at the wrong cap rate assumption.
This is data drift: the slow, silent divergence between what your systems say and what is actually true on the ground. In real estate, where deals rely on stitched-together feeds from property managers, brokers, lenders, and municipal records, drift is not an edge case. It is the default state of the data unless someone audits it on a schedule.
Drift rarely announces itself. It shows up as:
None of these are dramatic. All of them compound. A cap rate model built on drifted occupancy data doesn't just misprice one asset, it recalibrates every comparable valuation that references it.
Data governanceData governanceData governance is the set of policies, roles, and processes that ensure data is accurate, secure, well-defined, and used responsibly across an organization.View full definition → is the set of rules, roles, and processes that determine who is accountable for data accuracy, how it's defined, and how changes get tracked. In real estate, this matters for two concrete reasons.
Regulatory exposure. If your fund reports occupancy or income figures to investors and those figures are wrong due to unaudited drift, you risk misrepresentation claims. In the US, the SEC (Securities and Exchange Commission) has brought enforcement actions against real estate fund managers for inaccurate reporting to limited partners, under general anti-fraud provisions of the Investment Advisers Act. In the EU, the Alternative Investment Fund Managers Directive (AIFMD) requires periodic, accurate reporting to regulators and investors, and national regulators (like Germany's BaFin or France's AMF) can sanction managers for material misstatements even when unintentional.
Privacy exposure. Tenant data, rent rolls with individual names, payment histories, and access logs from smart building systems all count as personal data under the EU's General Data Protection Regulation (GDPR) and, increasingly, US state laws like the California Consumer Privacy Act (CCPA). A drifted or duplicated tenant record isn't just an accuracy problem, it's a data minimization and accuracy problem under GDPR Article 5, which requires personal data to be "accurate and kept up to date." Regulators have fined companies for retaining or processing outdated personal data long after it should have been corrected or purged. (See the European Data Protection Board's guidance on accuracy for the underlying principle.)
You don't need a data science team to run this. You need a checklist, a schedule, and someone accountable for closing each finding.
Pull entity names from your loan servicer, PMS, title records, and investor reporting platform. Run a fuzzy match (even a simple spreadsheet function works for small portfolios) to flag near-duplicates.
from rapidfuzz import fuzz
entities = {
"loan_system": "123 Main St LLC",
"title_record": "123 Main Street Holdings LLC",
"rent_roll": "Main St Property Owner LP"
}
pairs = [("loan_system", "title_record"), ("loan_system", "rent_roll")]
for a, b in pairs:
score = fuzz.token_sort_ratio(entities[a], entities[b])
print(f"{a} vs {b}: similarity {score}")A similarity score below roughly 70 to 80 (on a 0 to 100 scale) is a flag worth a human look, not an automatic fix. The point is triage, not automation replacing judgment.
Ask: when was this occupancy or rent roll figure last updated, and does that date match the reporting period label? A "Q3 occupancy" figure last modified in July is stale by definition. Most PMS platforms log a last-modified timestamp; if yours doesn't expose it, that absence is itself a governance gap worth escalating to the vendor.
Keep a simple data dictionary (a one-page log of field names, definitions, and units) for every external data source: comps providers, market-rent indices, ESG (environmental, social, governance) scoring vendors. Each quarter, request the vendor's current methodology note and compare it to last quarter's. CoStar, Green Street, and similar providers do periodically revise methodology. It is your job to catch when they do, not theirs to flag it loudly.
Pick a random 5 to 10% sample of units or leases each quarter and verify against a primary source: an actual lease document, a site visit report, or a utility billing record. This is the equivalent of an internal audit spot-check, and it's the single best defense against systemic feed errors that pass every automated check but are simply wrong.
An audit that produces findings nobody acts on is theater. Every flagged discrepancy needs a named owner and a resolution deadline, tracked in whatever system you already use for issue management. This is the governance layer, not the technical layer, and it's usually the one that's missing.
Knowledge check
1. In the mall example, what was the root cause of the occupancy discrepancy discovered during due diligence?
2. Which best defines 'data drift' as described in the lesson?
3. Why does the lesson argue that data drift is a governance problem rather than purely an IT problem?
4. A comps vendor quietly changes its definition of 'gross leasable area' without documentation. What is the most significant downstream risk this creates?
5. Select ALL correct answers about how data drift typically manifests in real estate data.
Select all the correct answers.
6. Select ALL correct answers about why drift is especially dangerous in real estate deal-making.
Select all the correct answers.
For a portfolio of meaningful size, this shouldn't sit solely with IT or solely with asset management. The best-functioning setups split it:
Quarterly is the right default cadence for most institutional portfolios: frequent enough to catch drift before it compounds into an annual valuation cycle, infrequent enough to be sustainable without dedicated headcount. Funds preparing for a sale, refinancing, or annual audit should tighten to monthly in the two quarters before that event.
🎬 [VIDEO: "Data GovernanceData GovernanceData governance is the set of policies, roles, and processes that ensure data is accurate, secure, well-defined, and used responsibly across an organization.View full definition → Fundamentals" - youtube.com/results?search_query=data+governance+fundamentals+explained - a plain-language walkthrough of governance roles, data ownership, and accountability structures applicable across sectors including real estate]