WhatsApp Is a Legal Liability for Letting Agents - And Most Don't Realise It

The tool every letting agent uses - and nobody talks about the risk

Ask any letting agent how they communicate with tenants and the answer is almost always the same: WhatsApp.

It's fast. Tenants prefer it. You can get a photo of a leaking pipe in seconds instead of waiting for an email. It feels like the obvious choice.

But WhatsApp was never designed to be a business communication platform for regulated industries. And in 2025, the courts made it official: WhatsApp messages can form legally binding contracts, even if nobody intended them to.

For letting agents, this changes everything.

The court ruling that should worry every agency

In the 2025 case of Jaevee Homes Limited v Fincham, the High Court's Technology and Construction Court ruled that an exchange of WhatsApp messages between a developer and a demolition contractor constituted a legally binding contract - despite the fact that no formal agreement was ever signed.

The court found that the messages contained the essential elements of a contract: offer, acceptance, consideration, and an intention to create legal relations. The informal, conversational tone of the messages didn't matter. The absence of a signed document didn't matter. The court concluded that the WhatsApp exchange was the contract.

This wasn't a one-off. Multiple legal analyses published throughout 2025 confirmed that UK courts are increasingly willing to treat informal digital communications - WhatsApp, text messages, even emojis — as evidence of binding agreements.

Now apply this to lettings. Think about the messages your team sends every day:

"Yes, we'll get someone out to look at the boiler this week."

"Don't worry, you can move in on the 15th."

"We won't be increasing the rent this year."

"I'll sort the damp issue, leave it with me."

Each of these could be interpreted as a contractual commitment. And if you can't produce the message thread six months later because the staff member who sent it has left and taken their phone with them — you have no defence.

The GDPR problem nobody mentions

WhatsApp isn't just a contract risk. It's a data protection risk.

When your team uses personal WhatsApp accounts to communicate with tenants, you're processing personal data (tenant names, addresses, phone numbers, repair details, sometimes photos of the inside of their homes) on a platform you don't control, on devices you don't own, with no data retention policy and no way to respond to a Subject Access Request.

Under UK GDPR, you're the data controller. You're responsible for how that data is processed, stored, and protected — regardless of which app your staff happen to be using.

The issues are concrete:

No data retention control. WhatsApp messages sit on personal phones indefinitely unless manually deleted. You have no policy governing how long tenant data is kept, and no way to enforce one.

No Subject Access Request capability. If a tenant submits a SAR (which they're entitled to do under GDPR), you need to produce all personal data you hold on them - including WhatsApp messages. Good luck collecting those from six different staff phones, some of whom may no longer work for you.

No deletion capability. When a tenancy ends, you should be deleting or archiving personal data you no longer need. How do you delete WhatsApp messages from an ex-employee's personal phone?

Cross-border data transfer. WhatsApp is owned by Meta. Data is processed through Meta's infrastructure, which raises questions about international data transfers - particularly relevant post-Brexit.

The ICO hasn't yet made a high-profile example of a letting agent over WhatsApp use. But the regulatory framework is clear, and it's only a matter of time before someone gets caught out.

The operational risk: when staff leave, your records leave too

This is the most immediate and practical risk, and it's the one that letting agents feel most acutely.

When a member of your team leaves - whether they resign, get made redundant, or move to a competitor - every tenant conversation they've had on their personal WhatsApp goes with them. You have no copy. You have no backup. You have no record.

That means:

You can't prove you acknowledged a maintenance request on a specific date. You can't show a tenant agreed to something they're now disputing. You can't demonstrate compliance with response timeframes when Awaab's Law extends to the PRS. You can't even tell the new staff member who picks up the property what conversations have already happened.

This isn't hypothetical. Property lawyer David Smith warned on LandlordZone that staff departures create a specific risk: a tenant could have served notice via WhatsApp to a staff member who has since left, and the agency might never know.

Every time someone leaves your team, you're losing months or years of tenant communication history. In an industry where compliance increasingly depends on documentation, that's not just inconvenient — it's dangerous.

"But tenants won't use anything else"

This is the objection every letting agent raises. And it's valid. Tenants love WhatsApp because it's instant, familiar, and already on their phone. They don't want to download a portal app. They don't want to send an email and wait three days for a reply. They want to send a photo of the broken tap and get a response.

The answer isn't to ban WhatsApp. That's unrealistic and would actively harm tenant communication. The answer is to capture WhatsApp conversations in a system that your agency controls - so the messages still happen on WhatsApp, but the records live on your business infrastructure.

This is the approach that the vacation rental and hospitality industry adopted years ago. Platforms like Guesty and Hostaway already offer unified inboxes that capture WhatsApp, email, SMS, and portal messages in one place. The residential lettings sector is years behind.

The solution is simple in principle: let tenants communicate however they prefer, but make sure every message - regardless of channel — lands in a centralised, timestamped, searchable system that belongs to the agency, not to individual staff members.

Five steps to reduce your WhatsApp risk today

You don't need to rip out WhatsApp overnight. But you do need to start reducing your exposure.

1. Acknowledge the risk formally. Add WhatsApp use to your next team meeting agenda. Make sure every staff member understands that WhatsApp messages can form binding contracts and that personal phones are not an appropriate place to store business records. This isn't about blame - it's about awareness.

2. Move to WhatsApp Business as a minimum. If you're going to use WhatsApp, at least use WhatsApp Business rather than personal accounts. It provides basic labelling, auto-replies, and a business profile. It's free and it separates business messages from personal ones. It's not a full solution, but it's better than nothing.

3. Establish a "confirm by email" policy. For any substantive agreement, commitment, or acknowledgement, train your team to follow up the WhatsApp conversation with a confirmation email. "As discussed on WhatsApp, we'll have someone out to inspect the damp by Friday 4th." This creates a parallel record on a system you control.

4. Keep a maintenance log outside of WhatsApp. Every maintenance request that comes in via WhatsApp should be immediately logged in a separate system - even if that system is just a shared spreadsheet for now. The WhatsApp message is how you hear about it. The log is how you prove you heard about it.

5. Plan for a proper solution. The medium-term answer is a platform that captures all tenant communications - WhatsApp, email, phone - in one place, with automatic timestamps and a compliance-grade audit trail. This technology exists in adjacent industries and is starting to emerge in UK lettings. If you're managing more than 50 properties, this should be on your roadmap for 2026.

The bottom line

WhatsApp isn't going away. Tenants prefer it, and for good reason - it's the fastest way to report a problem and share photos. But using it without safeguards is a growing legal, regulatory, and operational risk that most letting agents haven't confronted.

The 2025 High Court ruling confirmed that WhatsApp messages carry the same legal weight as formal contracts. GDPR requires you to control and account for the personal data flowing through those messages. And when Awaab's Law extends to the private rented sector, you'll need timestamped proof that you responded to maintenance reports within strict deadlines - proof that a personal WhatsApp account on an ex-employee's phone cannot provide.

The agents who get ahead of this will be the ones who keep using WhatsApp for what it's good at - fast, informal communication - while making sure every message is captured, timestamped, and stored in a system they own.

The agents who don't will find out the hard way what happens when a court asks for records they can't produce.

TenantComms is building a unified communication and maintenance tracking platform for UK letting agents - capturing email, and eventually WhatsApp, in one inbox with compliance-grade audit trails. Join the early access list to be first in line when we launch.