Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
- What Is A Power Of Authority Letter For A Business?
- When Should A UK Business Use A Power Of Authority Letter?
- What Should A Power Of Authority Letter Include?
- Who Can Sign A Power Of Authority Letter For Your Business?
- Digital Power Of Authority Letters And E‑Signatures
- Data Protection: LOAs And GDPR
- Template Cautions: Why “Quick Letters” Can Cause Big Headaches
- How To Revoke Or Change A Power Of Authority Letter
- Related Legal Documents That Work With LOAs
- Key Takeaways
Running a small business means you’ll often need someone else to act on your behalf - whether that’s dealing with a supplier, collecting documents, signing for deliveries, or speaking to a regulator. A power of authority letter (often called a “letter of authority” or “LOA”) is the simple, practical tool that lets you do that safely and clearly.
Used well, a power of authority letter speeds things up and reduces friction. Used poorly, it can expose your business to unauthorised commitments, data protection headaches, and disputes about whether someone actually had the right to act for you.
In this guide, we’ll explain what a power of authority letter is under UK law, when you should (and shouldn’t) use one, what to include, and how to keep tight controls so you’re protected from day one.
What Is A Power Of Authority Letter For A Business?
A power of authority letter is a short, written instruction from your business authorising a named person or organisation to perform specified tasks on your behalf. It’s typically limited in scope (what they can do) and time (how long they can do it), and it’s most useful for routine, low-risk matters where a full Power of Attorney would be overkill.
In practice, businesses use power of authority letters to:
- Let a staff member or third party collect documents or equipment
- Authorise a service provider to speak to a bank, utility, or HMRC on your behalf (for specific queries)
- Permit a manager to sign for deliveries or sign a simple acknowledgement
- Allow an agent to submit applications or forms in your name
It’s not the same as granting someone a general Power of Attorney (a much broader, legally formal authority, often used for individuals). A power of authority letter is narrower, quicker to issue, and better suited to everyday business processes.
If you need someone to correspond with a third party or regulator for a defined purpose, you might also be asked for an Authority To Act. The idea is similar - it proves permission - but the third party may request their own format.
Power Of Authority Letter Vs Power Of Attorney Vs Authority To Act
It helps to know the differences so you use the right tool for the job.
Power Of Authority Letter
- Short, business-friendly written instruction
- Limited scope and duration
- Best for routine admin, collections, speaking with providers, or filing specific forms
Power Of Attorney (PoA)
- Formal legal instrument granting wide powers to act for a person (or sometimes on behalf of a company if properly structured)
- Used for broader decision-making; may require execution as a deed and, for individuals, registration in some contexts
- More complex to set up and manage
Authority To Act
- Often a third party’s own form or letter confirming you consent to them dealing with your representative
- May sit alongside your internal power of authority letter
If the task is simple and time-bound (e.g. “collect X on Tuesday” or “speak to Y about invoice 123”), a power of authority letter usually does the job. Where the representative needs to sign contracts or make commitments, you’ll need to check your internal Signing Authority rules and possibly use a more formal mechanism.
When Should A UK Business Use A Power Of Authority Letter?
Common scenarios where a letter of authority makes sense include:
- Authorising a consultant to liaise with a supplier to resolve a specific billing dispute
- Letting a courier or contractor collect physical records or equipment from your premises
- Allowing a managed service provider to speak to your telecoms provider to troubleshoot a fault
- Permitting an accountant or bookkeeper to discuss certain matters with HMRC (in addition to formal agent authorisations)
- Delegating a manager to sign a non-binding acknowledgement, delivery note, or application submission
Always map the authority to the risk. If the person might bind your business to obligations (for example, sign a service contract), you must ensure their authority matches that risk and is granted lawfully. This ties to UK principles of actual, implied and apparent authority - and disputes often arise around whether an employee had capacity to commit the company. It’s sensible to set boundaries in writing and train staff accordingly; our overview of Employee Authority covers the risks.
What Should A Power Of Authority Letter Include?
Keep the letter clear, specific and easy for a third party to rely on. As a minimum, include:
- Business details: legal name, company number (if a company), registered address
- Recipient: who the letter is addressed to (e.g. “To: ”)
- Authorised person: full name, role, and (if applicable) employer or firm name
- Scope: exactly what the authorised person can do - e.g. “to collect , discuss , or submit ”
- Limitations: what they cannot do - e.g. “not authorised to enter contracts or incur costs”
- Duration: start date and expiry date (or the event that ends authority)
- Verification: contact details for confirmation and any ID requirements (e.g. photo ID on collection)
- Execution: who signed the letter for your business and in what capacity
- Revocation: a simple statement that you may revoke the authority at any time by notice
If the letter authorises someone to sign, make sure your internal sign-off processes are aligned with your constitutional documents and board delegations. For higher-risk powers (anything that creates legal obligations), consider documenting the delegation via appropriate Board Resolutions and internal policies.
Who Can Sign A Power Of Authority Letter For Your Business?
Under UK company law, execution and authority come back to your governance documents and established delegations. In most small companies, a director or authorised officer signs power of authority letters.
Key points to get right:
- Authority to grant authority: The person signing the letter must have the power to delegate within the scope given. Check your Articles and any board approvals.
- Consistency with signing policy: Your signing policy should set monetary limits and categories of acts requiring director sign-off versus management sign-off.
- Use company letterhead and include the company number: It reduces delays because third parties can quickly verify details at Companies House.
Where the authorised person will be signing a document, ensure the document itself is executed correctly. For guidance on methods, witnessing, and e-signatures, see our practical note on Executing Contracts.
Digital Power Of Authority Letters And E‑Signatures
Digital letters work well if the recipient accepts them. UK law generally recognises e‑signatures for simple contracts and letters, provided there’s a clear intention to sign and appropriate reliability.
Best practices for digital LOAs:
- Use a reputable e‑signature tool and keep the audit trail
- Include verification steps (e.g. “we may be contacted at to confirm this authority”)
- Set a short expiry, especially if access to personal data is involved
- Store the signed PDF and audit log centrally with your contract records
Data Protection: LOAs And GDPR
Power of authority letters often authorise someone to access personal data (for example, customer contact details or staff information when handling a query). Under the UK GDPR and Data Protection Act 2018, you must have a lawful basis for processing and sharing that data, and you must keep it secure.
Practical steps:
- Share only what’s necessary for the defined purpose
- Ensure the authorised person understands confidentiality and data handling expectations
- Record the sharing decision and the legal basis (usually legitimate interests or contract)
- Update your Privacy Policy so it explains when you may share data with authorised agents
If you regularly use third parties to act for you, put a framework in place - for example, a short Agency Agreement plus security requirements - and then issue specific LOAs as needed for each task.
How To Control Risk When You Delegate Authority
Delegation should make life easier, not riskier. Build a simple, repeatable process so everyone knows the rules.
1) Classify The Task And Risk
- Low risk: collecting items, obtaining non-sensitive information, routine queries
- Moderate risk: discussing account details, submitting applications, handling personal data
- High risk: signing contracts, committing to spend, making legal admissions
Match the formality of your authorisation to the risk category.
2) Keep The Scope Tight
- Define the task precisely (what, who, where)
- Set a short expiry date
- Prohibit sub-delegation unless you approve it in writing
3) Verify Identity
- Ask the representative to bring photo ID or use the email domain of their firm
- Provide a phone number for real-time verification
4) Control Who Can Grant Authority
- Limit sign-off to named roles (e.g. directors, CFO, head of operations)
- For higher-risk delegations, require two signatories or a board minute
5) Train Your Team And Partners
- Explain what staff can and can’t agree to on calls
- Make sure suppliers and service providers understand your authorisation format
Template Cautions: Why “Quick Letters” Can Cause Big Headaches
It’s tempting to grab a generic template, but mismatched or vague wording is where many disputes start. Common pitfalls include:
- No end date (blanket, indefinite authority that’s hard to revoke in practice)
- Ambiguous scope (“handle all matters” can be read very broadly)
- Silent on limits (no cap on cost or commitment)
- No identity checks (third parties accept the letter at face value)
- Not aligned to your internal delegations
The safer approach is to keep a short, tailored precedent with clear fields for scope, duration and limits, and align it to your internal signing policy. If the authorised person will sign or submit anything significant, revisit your rules on Signing Authority and execution requirements.
How To Revoke Or Change A Power Of Authority Letter
Revocation is straightforward, but do it cleanly so third parties can’t rely on an outdated letter.
- Send a written revocation to the recipient and the authorised person
- Mark the original letter as revoked and store it with your records
- Notify any impacted internal teams and suppliers
- Where appropriate, issue a replacement letter with updated scope or dates
If your original letter includes a clear right to revoke at any time and an email address for confirmations, recipients are more likely to check back before relying on it.
Frequently Asked Questions
Is A Power Of Authority Letter Legally Binding?
It’s evidence of permission and can create actual authority within its scope. Third parties may rely on it if it looks legitimate and comes from someone with the power to delegate. That’s why it’s vital that the signatory has proper authority and the letter is clear and specific.
Does It Need A Witness Or To Be A Deed?
For routine delegations, no - a simple letter is fine. If you’re granting broader powers or authority to execute deeds, you may need more formal documentation and to follow the rules for Executing Contracts. When in doubt, get tailored advice.
Can An Employee Sign On Our Behalf Without A Letter?
Sometimes employees have implied or apparent authority due to their role, but relying on that creates risk. Clear, written delegations and role-based policies reduce disputes about an employee’s capacity to bind the company - see our note on Employee Authority.
Will A Provider Accept A Digital LOA?
Many will, but policies vary. Ask first, then issue either a physical letter on letterhead or a digitally signed PDF via a recognised e‑signature tool.
Step-By-Step: Issuing A Power Of Authority Letter The Right Way
Step 1: Confirm The Task And Risk
Write down exactly what the representative needs to do and whether they might access personal data or bind you to obligations.
Step 2: Choose The Right Instrument
For simple, time-bound tasks, use a power of authority letter. If the representative must negotiate or sign contracts, consider an Agency Agreement or a formal internal delegation backed by a board minute.
Step 3: Draft The Letter
Use your vetted precedent. Include business details, named representative, precise scope and limits, start and end dates, verification contact, and revocation clause.
Step 4: Get Proper Sign-Off
Ensure the signatory has the power to delegate. For higher-risk matters, record the decision via Board Resolutions.
Step 5: Issue And Verify
Send the letter directly to the recipient and copy the authorised person. Offer a verification phone number or email. Ask the recipient to confirm acceptance and any ID they require.
Step 6: Store And Track
File the signed letter centrally. Note the expiry date in your calendar so you can revoke or refresh it on time. If the letter involves personal data, make sure your Privacy Policy covers this sharing.
Related Legal Documents That Work With LOAs
- Signing policy and delegations schedule (who can approve what)
- Supplier and customer terms that clarify who may speak and sign
- Agency or services contracts setting out scope, confidentiality and data handling
- Clear processes for Executing Contracts and verifying authority
- Internal guidance on when to use an Authority To Act form requested by a third party
It’s also sensible to train your team on how to spot red flags (for example, a third party insisting an LOA allows them to change contract terms). If something feels beyond the letter’s scope, pause and escalate.
Key Takeaways
- A power of authority letter is a simple, targeted way to let someone act for your business for a defined purpose and time period.
- Use it for low to moderate-risk tasks; for higher-risk acts (like signing contracts), align with your Signing Authority rules and consider formal delegations.
- Make the letter specific: include scope, limits, duration, verification details and a clear right to revoke.
- Control risk with identity checks, short expiry dates, and internal approvals recorded via appropriate Board Resolutions where needed.
- If personal data is involved, minimise data sharing and ensure your Privacy Policy covers sharing with authorised agents.
- Avoid vague templates - tailor your LOA to the task and keep it aligned with your Articles, policies and execution rules for Executing Contracts.
If you’d like help putting in place a clear, robust power of authority letter process - or you need advice on the right delegation or agency structure for your situation - you can reach us at 08081347754 or team@sprintlaw.co.uk for a free, no-obligations chat.


