Commercial Lease Landlord Access and Right of Entry: Notice Requirements, Tenant Protections & HIPAA Concerns 2026

The Foundation: Exclusive Possession and the Right of Entry Exception

A commercial lease's core grant — the premises are leased to the tenant for the lease term — conveys a right of exclusive possession. This means the tenant controls who enters the leased space and when, subject only to the exceptions the lease itself creates. Unlike residential tenants, who have statutory protections in most states governing landlord access (typically requiring 24-hour notice), commercial tenants' access rights are almost entirely determined by the lease contract. There is no standard commercial landlord access statute in most U.S. jurisdictions — what your lease says is what your rights are.

The right of entry provision is the lease clause that defines the exceptions to the tenant's exclusive possession: the specific circumstances in which the landlord (and the landlord's agents, contractors, and representatives) may enter the premises without the tenant's contemporaneous consent. The provision typically authorizes entry for:

• Inspections of the premises and building systems
• Performance of repairs, maintenance, and improvements
• Reading utility meters and monitoring building systems
• Compliance inspections required by law or mortgage
• Showing the premises to prospective tenants during the last [X] months of the lease term
• Showing the premises to prospective purchasers of the building at any time
• Emergency access with no advance notice

Notice Requirements: The Core Tenant Protection

The 24-48 Hour Notice Standard

The market standard for non-emergency commercial landlord access requires the landlord to provide the tenant with advance written notice of at least 24–48 hours before entry. Most negotiated commercial leases provide for 24 hours minimum; more tenant-favorable provisions require 48 hours; and some specialized tenants (medical, data, financial) negotiate for 72 hours or more. The notice requirement serves several important functions:

• Operational continuity: 24–48 hours allows the tenant to schedule the access visit at a time that minimizes disruption to customer-facing operations, staff productivity, and scheduled events
• Security preparation: Advance notice allows the tenant to ensure that a representative is present during entry, that sensitive areas are secured, and that access protocols are followed
• Confidentiality protection: For businesses with confidential materials (client files, proprietary data, trade secrets), advance notice allows those materials to be secured before entry
• Compliance preparation: For regulated businesses, advance notice allows the tenant to ensure that entry does not inadvertently create compliance violations

Notice should be required in writing — email is generally sufficient but should be specified in the lease as an acceptable notice method for right of entry purposes. Verbal notice without confirmation is inadequate because it creates disputes about whether notice was actually given and when the 24-hour clock started running.

Business Hours Limitation

In addition to advance notice, non-emergency entry should be limited to normal business hours — typically defined as 8 a.m. to 6 p.m. Monday through Friday, excluding federal holidays, unless the tenant's operations span different hours. This limitation prevents the landlord from scheduling access at 7 a.m., on weekends, or late in the evening when the tenant's staff and security protocols may not be present. For businesses that operate extended or non-standard hours (restaurants, retail, fitness studios, medical practices with evening appointments), the "normal business hours" definition should match the tenant's actual operating hours rather than a generic 9-to-5 standard.

Tenant's Right to Accompany

The right of entry provision should explicitly state that the tenant has the right to have a designated representative accompany the landlord and any contractors during any non-emergency entry. This right serves several purposes: it ensures that landlord representatives don't access restricted areas unintentionally; it allows the tenant to maintain a log of what was inspected, repaired, or observed; and it provides a witness to confirm that the landlord's access did not result in any damage, removal of tenant property, or other inappropriate actions. The tenant should also have the right to require that the landlord's representatives execute a basic confidentiality agreement before accessing the premises — particularly relevant for tenants with proprietary or client-sensitive information in plain view.

Emergency Access: The "No Notice" Exception

What Constitutes a Genuine Emergency

Emergency access — entry without advance notice — must be limited to genuine emergencies posing an imminent risk of harm to persons or significant damage to property. Clear emergencies that justify no-notice access include:

• Active fire or imminent fire risk (smoke detected, sprinkler triggered)
• Gas leak or explosion risk
• Flooding from burst pipes or roof failure causing active water intrusion
• Structural collapse or imminent structural failure
• Active security breach or forced entry
• Medical emergency involving a person in the building
• Failure of building systems creating life safety risk

What does NOT constitute an emergency justifying no-notice access:

• A routine inspection that the landlord forgot to schedule in advance
• A contractor who has a scheduling gap and can come earlier than planned
• The landlord wanting to show the space to a prospective buyer who showed up unexpectedly
• A maintenance issue that is not urgent but the landlord wants to address
• A building system check that could have been scheduled with advance notice

The right of entry provision should define "emergency" with reasonable specificity — not simply grant the landlord the right to enter "in case of emergency" without defining what that means. A tight definition protects tenants from landlords who characterize routine access as emergency access to avoid the notice requirement.

Post-Emergency Notice Obligation

Even in genuine emergencies, the landlord should be required to provide written notice to the tenant as soon as practicable after the emergency entry — ideally within 24 hours — describing the reason for entry, what areas were accessed, what actions were taken, and whether any tenant property was moved or affected. This documentation obligation creates accountability and provides the tenant with information needed to assess whether the emergency access caused any collateral damage.

The Real Math: Cost of Unannounced Access

Access for Showing: Prospective Tenants and Buyers

Prospective Tenant Showings

As a tenant's lease expiration approaches, the landlord typically wants to show the space to prospective replacement tenants before the current tenant vacates. This is a legitimate landlord business interest — they need to fill the space — but it creates real disruption to the current tenant's operations. Showings involve strangers walking through the tenant's active business operations, viewing proprietary office layouts, client-visible areas, and potentially confidential materials.

Tenant protections for prospective tenant showings should include:

• Restriction window: Showings of the current tenant's space to prospective replacement tenants should only be permitted during the last 12 months of the lease term (or 18 months for a large space where finding a replacement tenant requires more lead time)
• Minimum advance notice: At least 48 hours for any showing
• Frequency limit: No more than two or three showings per week to prevent constant disruption
• Business hours only: Showings during normal business hours when tenant staff is present
• Tenant accompaniment: The tenant or a designated representative may accompany all showings
• Prospective tenant NDA: Prospective tenants must execute a non-disclosure agreement before accessing the space — protecting the tenant's business layout, client list, and operational details from competitors

Prospective Buyer Showings

When the landlord is selling the property, they need to show prospective buyers the building — including tenant spaces. Unlike prospective tenant showings (which are typically limited to the last period of the lease term), building sale showings may occur at any time during the lease. This creates year-round disruption risk for tenants in well-managed properties that change ownership frequently.

Tenant protections for building sale showings:

• 48-hour advance notice minimum — always, with no emergency exception for sale-related showings
• Buyer representatives only — no competing businesses: Prospective buyers and their representatives may not include competitors of the tenant or representatives who would have a business reason to want access to the tenant's space independent of the purchase
• Buyer confidentiality agreement: All prospective buyers and their representatives must execute a confidentiality agreement covering any tenant information, trade secrets, or business details observed during the showing
• Frequency limitation: No more than one showing per week
• Tenant representation: Right to accompany all showings

Special Cases: HIPAA, Data Centers, and Security-Sensitive Tenants

HIPAA-Covered Healthcare Tenants

Medical and healthcare tenants subject to HIPAA face unique access challenges. The HIPAA Privacy Rule requires covered entities to protect the confidentiality, integrity, and availability of protected health information (PHI). Unannounced or poorly managed landlord access creates multiple HIPAA risks:

• Contractors may inadvertently view patient records, charts, or other PHI left in plain sight in clinical areas
• Landlord representatives may pass through waiting areas where patients' check-in information is visible
• Access to server rooms or records storage areas may expose electronic PHI to unauthorized viewers
• Photographs taken by the landlord or their contractors during access may inadvertently capture PHI

Medical tenants should negotiate the following access-specific protections:

• Minimum 48-hour advance notice for all non-emergency entry — not 24 hours; 48 hours provides adequate time to prepare clinical areas for authorized access
• Business Associate Agreement (BAA) requirement: The landlord and any contractors or representatives who will access the premises must execute a HIPAA-compliant BAA before any access — this is a HIPAA requirement for entities that may create, receive, maintain, or transmit PHI on behalf of a covered entity
• Clinical area restrictions: Access to treatment rooms, clinical storage areas, and areas where PHI is typically accessible is restricted to specifically scheduled visits with a designated tenant representative present
• No photography without consent: The landlord and all representatives are prohibited from photographing or recording any area of the premises without the tenant's advance written consent
• Incident documentation: Any access that results in potential PHI exposure must be documented and reported to the tenant's HIPAA compliance officer within 24 hours

Data Centers and Technology Tenants

Data center tenants, colocation facilities, and technology companies with server infrastructure in their commercial space have access concerns that parallel HIPAA but are driven by cybersecurity and client contractual obligations rather than healthcare regulation:

• Server room access: Any access to server rooms or data infrastructure areas requires advance notice, tenant accompaniment, and execution of a data security agreement by all accessing parties
• Background checks: Some data tenants require background check clearance before any landlord contractor may access the space — this requires negotiated lead time and a defined process in the lease
• Audit trail requirements: All access to server areas must be logged with name, date, time, and purpose — supporting the tenant's own access control audit requirements
• Anti-photography provisions: No photography of server infrastructure, network equipment, cable configurations, or any data processing area
• ISO/SOC compliance: Access procedures must be consistent with the tenant's ISO 27001 or SOC 2 compliance requirements — which typically require documented, controlled physical access procedures

Legal and Financial Services Tenants

Law firms, financial advisory firms, and accounting practices face access concerns driven by attorney-client privilege, financial privacy laws (GLBA), and client confidentiality obligations:

• Client files, matter files, and financial records should be secured before any landlord access — requiring advance notice adequate to complete that preparation
• Access to conference rooms where client meetings are in progress is prohibited without express tenant consent
• Any landlord representative who inadvertently views privileged information is subject to mandatory notification and potential remediation under professional responsibility rules

Comparison Table: Emergency Access vs. Routine Access vs. Sale/Lease-Up Showings

Limiting Landlord Access: Practical Strategies for Tenants

Designate Restricted Areas in the Lease

Tenants with genuinely sensitive areas — server rooms, records storage, clinical treatment areas, vault rooms, private office areas used for client meetings — should designate these areas as restricted zones in the lease itself, with specific enhanced access procedures. The lease should list restricted areas by name or description and provide that access to those areas requires: (a) additional advance notice (e.g., 72 hours vs. 48 hours standard); (b) specific purpose stated in the notice; (c) tenant representative required to be present; and (d) any required confidentiality documentation executed in advance. This approach is more durable than relying on verbal agreements with building management, which change with management personnel.

Access Log Requirement

Negotiate a lease provision requiring the landlord to maintain and provide the tenant with an access log documenting every entry into the premises: date, time, person entering, purpose, areas accessed, duration, and any actions taken. An access log creates accountability that deters unauthorized or excessive access, provides documentation for compliance purposes, and creates an audit trail if access-related damage or data exposure occurs. The access log should be provided to the tenant monthly or upon request.

Reasonable Frequency Limitation

For routine inspections (as opposed to emergency access or repair-related access), negotiate a frequency limitation — for example, the landlord may conduct routine inspections no more than once per calendar month, with advance scheduling. This prevents the landlord from using routine inspection rights to conduct near-daily access in a building where management is overbearing. Most landlords will accept a once-per-month limitation for routine inspections; it aligns with their actual operational needs and removes the theoretical unlimited access that many boilerplate provisions create.

6 Red Flags in Right of Entry Provisions

Frequently Asked Questions