UK landlord compliance
How long must landlords keep rental records?
HMRC requires 5 years and 10 months. Tenancy agreements and compliance certificates have their own retention rules. UK GDPR adds a delete-when-no-longer-needed obligation on top.
Last updated:
The short answer
HMRC tax records: keep for 5 years and 10 months after the end of the tax year. For 2025/26 records, that means until 31 January 2032.
Tenancy agreements + deposit protection: at least 6 years after the tenancy ends, to cover the contract claim limitation period.
Compliance certificates: keep CP12s for at least 2 years after issue, EICRs for the 5-year validity plus 2 years, EPCs as long as you own the property (and they remain on the public register indefinitely).
UK GDPRrequires you to delete personal data when you no longer have a lawful purpose for keeping it. Set this up once in a written retention schedule and your privacy notice; don’t hoard ex-tenant data forever.
HMRC’s rule
5 years and 10 months, explained
HMRC’s record retention requirement for Self Assessment (and from April 2026, MTD ITSA) is 5 years and 10 months from the end of the tax year. The slightly odd number comes from: 5 years to cover the discovery assessment window, plus 10 months from 5 April year-end to the 31 January filing deadline.
Worked example. The 2025/26 tax year ends 5 April 2026. Records must be kept until:
= 31 January 2032
If you’re investigated, the retention obligation extends until the enquiry is closed. Carry-forward losses also extend it — you need to keep the records that justified the original loss for as long as the loss is being used to reduce a later year’s tax bill.
The full table
Retention by document type
HMRC tax records (rental income + expenses + supporting receipts)
5 years 10 months after end of tax yearFrom April 2026 onwards, MTD ITSA records fall under the same retention rule. Digital is fine.
Tenancy agreement (signed AST)
At least 6 years after tenancy endsLimitation Act 1980 contract claim window. Larger portfolios often keep 7–10 years.
Deposit protection certificate + prescribed information
6 years after tenancy ends (matches AST)Section 21 challenges can reach back this far; the deposit paper trail is your defence.
Gas Safety Record (CP12)
2 years minimum after issueBest practice: keep all CP12s for as long as you own the property.
EICR
5 years (the validity) plus 2 years afterIf C1/C2 issues were fixed, retain the remedial confirmation alongside.
EPC
On the public register indefinitelyKeep your own copy too. EPC is publicly searchable on GOV.UK Find an Energy Certificate.
HMO licence
Full validity plus 6 years afterLocal authority Rent Repayment Orders can reach 12 months back from claim; documentation matters.
Right to Rent check evidence
1 year after tenancy endsCivil penalties up to £20,000 per illegal occupier (raised 2024); strong defence requires evidence.
Maintenance records, invoices, contractor receipts
6 years (capital items longer)Capital improvements increase the property's tax base for CGT — keep those forever.
The GDPR layer
You also have a duty to delete
UK GDPR requires you to delete personal data when you no longer have a lawful purpose for keeping it. For landlords, the most common categories that trigger deletion timers:
- Ex-tenant contact details and bank detailsDelete or anonymise once the limitation period for any tenancy claim has passed (typically 6 years) unless still needed for an HMRC purpose.
- Right to Rent check evidenceRetain only for the duration the GOV.UK guidance requires (currently 1 year after tenancy end) and then delete.
- Applicant data from people you didn’t let toDelete relatively quickly — typically 6 months after the application unless there’s a complaint or live dispute.
The practical implementation is a written retention schedule in your tenancy admin process. LandlordFlow tags every document with the tenancy it relates to, so when a retention threshold is hit you can review and purge cleanly — not by “forgetting” the document exists in a shared Drive folder.
Common questions
Questions, answered
How long must I keep HMRC rental tax records?+
What if HMRC opens an enquiry?+
Do tenancy agreements have a different retention rule?+
Compliance certificates — do they expire when the property is sold?+
Does GDPR force me to delete tenant data sooner?+
Related reads
Worth reading next
Keep what you need. Delete the rest.
See how LandlordFlow stores per-property records with retention-aware tags — so HMRC’s 5y10m and UK GDPR’s delete-when-done coexist cleanly.
