Letting Agent Legal Requirements 2026: The Complete Guide to Running a Compliant Agency

Two kinds of compliance, and most guides only cover one

Almost everything written about letting agent compliance is about the property: the gas safety record, the EICR, the EPC, the Right to Rent check, the deposit protection. That is the day-to-day burden, and we cover it in full in the UK letting agent compliance checklist.

But there is a second layer that sits underneath all of it — the legal requirements that govern the agency itself. These are not about any one property. They are about the business being authorised to trade as a letting agent at all: protecting the client money you hold, belonging to a redress scheme, being registered for data protection and (where it applies) anti-money-laundering supervision, charging tenants only what the law allows, and being transparent about your fees and memberships.

Get the property side wrong and you have a problem on one address. Get the agency side wrong and you have a problem with the whole business — penalties up to 30,000 pounds, a banning order in the worst cases, and landlords who can lawfully walk because you were never properly set up. This guide is the agency-level checklist, written for letting agents in England. We make Proplio, compliance software for letting agents, so the per-property tracking is our patch — but the duties below are the law, and every agency owner should be able to tick each one off from memory.

1. Client Money Protection — the one with the biggest fine

If your agency handles client money — rent collected on a landlord's behalf, tenancy deposits before they reach a scheme, a maintenance float — you are legally required to belong to an approved Client Money Protection (CMP) scheme. This has been mandatory in England since 1 April 2019, under the Client Money Protection Schemes for Property Agents (Requirements to Belong to a Scheme etc.) Regulations 2019.

CMP exists to insure the money itself. If an agent goes insolvent, or money is misappropriated, the scheme reimburses the landlord or tenant whose funds were lost. Three obligations come with membership:

• Join an approved scheme. The government-approved CMP providers include Propertymark, Client Money Protect, Money Shield, RICS, UKALA and Safeagent, among others. You hold a certificate confirming cover.
• Hold client money in a separate client account at a bank or building society authorised by the FCA — never mixed with the agency's own trading account.
• Display and provide the certificate. Show it in your office and on your website, and provide a copy free of charge to anyone who asks.

The penalties are the heaviest in this entire guide. Operating without CMP cover where it is required can bring a penalty of up to 30,000 pounds. Failing to display the certificate or meet the transparency requirements can bring up to 5,000 pounds. The only agents outside the requirement are those that genuinely never hold client money at any point — a rare position for a managing agent, and one you should be sure of rather than assume.

2. Redress scheme membership — compulsory since 2014

Separately from CMP, every letting and property management agent in England must belong to a government-approved redress scheme. This has been compulsory since 1 October 2014, and it is about conduct, not money: it gives consumers — tenants and landlords — a free, independent route to escalate a complaint about your service and have it adjudicated, with the power to direct compensation.

There are two approved schemes for property agents: The Property Ombudsman (TPO) and the Property Redress Scheme. You join one, display your membership, and handle complaints through your own in-house procedure first before they can be escalated.

People conflate redress and CMP constantly, so be clear: CMP insures the money; redress adjudicates the service. You need both, they are different schemes, and missing either is its own penalty. Letting while not a member of an approved redress scheme can cost up to 5,000 pounds.

A note on the horizon: the Renters' Rights Act introduces a single mandatory ombudsman for landlords, which changes the redress landscape for landlords directly. Agent redress obligations continue alongside it — track the detail in our Renters' Rights Act operations checklist as commencement firms up.

3. Anti-money-laundering supervision — only above the threshold, but get it right

This one trips agents up in both directions — some register when they need not, others ignore a duty they actually have.

Letting agency work was brought within the Money Laundering Regulations 2017 from 10 January 2020, but only for high-value lettings: a letting agency business must register with HMRC for AML supervision if it acts in relation to any tenancy where the rent is at or above 10,000 euros per calendar month (roughly 8,000 to 9,000 pounds depending on the rate). Estate agency — sales — work is supervised regardless of value, which is why a combined sales-and-lettings firm is almost always in scope.

If you do handle any tenancy at or above that threshold, you must:

• Register with HMRC for anti-money-laundering supervision (or be supervised by a professional body) before carrying on the business.
• Appoint a nominated officer (MLRO) and put policies, controls and staff training in place.
• Carry out customer due diligence on both landlords and tenants — identity verification, and ongoing monitoring.
• Keep records and submit Suspicious Activity Reports where required.

Most ordinary residential letting agents sit below the threshold and do not need to register. But "we're probably fine" is not an assessment. Check it against the rents you actually handle, document the conclusion, and re-check whenever you take on a premium or prime-central portfolio that could tip a single tenancy over 10,000 euros a month. Failure to register when required carries significant penalties and, at the serious end, criminal liability.

4. Data protection — ICO registration and UK GDPR

A letting agent is, in data-protection terms, a heavyweight data controller. You hold tenant identity documents, Right to Rent and immigration evidence, references, employment and bank details, guarantor information, and a full landlord record set. That makes two duties unavoidable:

• Pay the ICO data protection fee. Unless a narrow exemption applies, every data controller must pay the annual fee to the Information Commissioner's Office. It is tiered by organisation size and turnover — typically 40 to 60 pounds for a small agency. Not paying is itself an offence: the ICO can issue a fixed penalty of up to 4,350 pounds, entirely separate from any fine for a breach.
• Comply with UK GDPR. Lawful basis for each use of data, a privacy notice, secure storage, retention limits (do not keep identity documents forever — Right to Rent evidence, for example, is kept for the tenancy plus one year), and the ability to answer a subject access request within a month.

The Right to Rent footprint deserves particular care, because immigration status is sensitive and the volume is high across a managed book — we go into the record-keeping side in the Right to Rent guide. For a managing agent, "where is every tenant's identity evidence and when must it be deleted" is a real data-protection question, not a filing afterthought.

5. The Tenant Fees Act — what you can and cannot charge

Since 1 June 2019, the Tenant Fees Act 2019 bans letting agents and landlords in England from charging tenants anything beyond a closed list of permitted payments:

• Rent.
• A refundable tenancy deposit, capped at five weeks' rent where the annual rent is under 50,000 pounds, or six weeks' rent where it is 50,000 pounds or more.
• A refundable holding deposit, capped at one week's rent.
• Payments for a tenant-requested change to, or early end of, the tenancy (capped at the landlord's reasonable costs).
• Default fees for late rent or a lost key, within strict statutory limits.
• Council tax, utilities, communications services and a TV licence where the tenancy provides for them.

Everything else — administration fees, referencing fees, inventory fees, renewal fees, "check-out" fees charged to the tenant — is prohibited. Charge a banned fee and the first breach is a civil penalty of up to 5,000 pounds; a repeat within five years is a criminal offence or a penalty up to 30,000 pounds. Critically, while you are holding an unlawfully charged payment you cannot serve a valid Section 21 notice — and with Section 21 being abolished under the Renters' Rights Act, a clean fees position matters even more for keeping your Section 8 grounds watertight.

6. Fee transparency and material information

Two overlapping duties govern what you must tell people, up front.

Fee transparency under the Consumer Rights Act 2015. Letting agents must publish a full list of their fees — clearly, with VAT, and with enough detail to understand what each is for — together with a statement of which redress scheme and which CMP scheme they belong to, or that they belong to one. This must appear in the office and on the website (and on third-party portals where you list). The penalty for not displaying it is up to 5,000 pounds. This is the single easiest duty to satisfy and one of the most commonly enforced, because a trading standards officer can check your website in thirty seconds.

Material information in listings. Property advertisements must include the material information a consumer needs to make a decision — council tax band, rent, deposit, tenure and similar — under consumer protection law. The National Trading Standards Estate and Letting Agency Team (NTSELAT) has set out detailed guidance on what counts as material in Parts A, B and C. Note that the underlying consumer-protection regime changed in 2025: the unfair-trading rules that used to sit in the Consumer Protection from Unfair Trading Regulations 2008 were carried into the Digital Markets, Competition and Consumers Act 2024, which took effect in April 2025. The practical effect for listings — give the consumer the material facts, do not mislead by action or omission — continues, with strengthened enforcement powers behind it.

The agency-level checklist at a glance

Figures are indicative maximums and vary by enforcement route and repeat offending. For the per-property penalties — gas, EICR, HMO, Right to Rent — see the complete landlord and letting agent fines guide.

How the agency side and the property side fit together

These business-level duties are mostly set-and-maintain: you join the schemes, register where required, publish the right pages, and then keep the memberships renewed and the policies current. They do not change property by property.

The per-property compliance is the opposite — it is per address, per renewal cycle, forever: a gas record on every property every year, an EICR every five, an EPC every ten, a Right to Rent check and follow-up per tenancy, a deposit protected within 30 days each time. That is the side that actually consumes the working week, and the side where things silently lapse, because every property is on its own clock.

An agency that has nailed the business-level requirements but lets a third of its EICRs run overdue is still a non-compliant agency with exposed landlords. The reverse — pristine property tracking but no CMP cover — is just as broken. You need both, and they are tracked in completely different ways: the agency duties belong in a renewals diary and your onboarding-a-new-agency setup; the property duties belong in a system built to chase hundreds of expiry dates across a portfolio.

That property-tracking job is what Proplio is built for: every property, every compliance type, every expiry date in one red-amber-green dashboard; automatic reminders at 90, 60, 30, 14 and 7 days before each renewal; a one-click, audit-ready PDF pack per property with a verification ID for when a council, a trading standards officer or a tenant's solicitor asks; and read-only landlord share links so your clients can see their own compliance without a single email. Flat 29 pounds a month, unlimited properties, unlimited team. If you are weighing it against a spreadsheet or the all-in-one CRMs, we lay it out honestly in compliance software vs spreadsheet and the best compliance tracking software for letting agents.

Key takeaways

• Letting agent compliance has two layers: the agency's own legal requirements, and the per-property obligations. Most guides only cover the second — this one covers the first.
• Client Money Protection (since April 2019) is the duty with the biggest fine: join an approved scheme, hold client money separately, display the certificate. Up to 30,000 pounds for getting it wrong.
• Redress scheme membership (since October 2014) is separate from CMP and equally mandatory — CMP insures the money, redress adjudicates the service. You need both.
• AML registration with HMRC is required only for lettings at or above 10,000 euros per month — most agents are below it, but assess and document it rather than assume, and re-check on premium portfolios.
• ICO registration, Tenant Fees Act compliance, and fee + material-information transparency round out the agency-level set — each with its own penalty, each easy for an enforcer to check.
• The business duties are set-and-maintain; the per-property duties renew forever on dozens of separate clocks. An agency needs both right, tracked in the way each one demands.

This article is general guidance for letting agents in England as of June 2026 and is not legal advice. The requirements above are set by separate statutes and regulators, have their own exemptions and thresholds, and change over time — the move from the Consumer Protection from Unfair Trading Regulations 2008 to the Digital Markets, Competition and Consumers Act 2024 is one recent example. Confirm the current rules with the relevant scheme, HMRC, the ICO, or a qualified adviser before relying on them. Proplio is our product.