Security deposits would also be capped at three months’ rent, with operators required to return the amount within 30 days after a student vacates the premises.