While properties are physical assets, tenants are natural persons protected by UK GDPR / Data Protection Act 2018, the Defamation Act 2013, and statutory housing frameworks. A public "Yelp for tenants" or open blacklist violates UK privacy law and would face immediate enforcement from the Information Commissioner’s Office (ICO). However, creating a legal, compliant, reference-style tenant feedback database is possible. Key Differences: Landlords vs. Tenants AspectLandlord / Property System Tenant Rating System Data Identifier UPRN (Unique Property Reference Number) or Land Registry Title. Verified Identity (Name, DOB, National Insurance / Reference ID). Accessibility Public or Semi-Public (linked to property, not individual PII). Strictly Private & Role-Gated (only accessible during active referencing). Legal Risk Commercial reviews, low privacy impact. Severe: UK GDPR breach, Defamation (Libel), ICO fines. Data Nature Subjective reviews & photos permitted. Must be strictly objective, factual, and verifiable. How to Build a Fully Compliant Tenant System in England To make a tenant tracking system legal under English law, you must move away from "star ratings and subjective reviews" toward "verified factual event logging" governed by five structural pillars: 1. Lawful Basis for Processing (UK GDPR Article 6) You cannot rely on tenant consent alone (as consent can be withdrawn at any time). Legitimate Interests (Article 6(1)(f)): The platform must operate under Legitimate Interests. You must complete a formal Legitimate Interests Assessment (LIA) and Data Protection Impact Assessment (DPIA) demonstrating that protecting landlords/agents from financial loss or severe property damage balances fairly against the tenant's privacy rights. Mandatory Application Notice: Tenancy application forms must include explicit transparency wording stating that adverse performance data (e.g., validated arrears, formal court judgments) may be submitted to the database. 2. Objective, Fact-Based Logging (Eliminating Defamation Risk) Allowing free-text subjective notes (e.g., "Tenant was messy and rude") creates massive legal liability under the Defamation Act 2013 and breaches the UK GDPR requirement for data accuracy (Article 5(1)(d)). What is Permitted (Factual & Verifiable): Rent arrears backed by formal accounting records or Court Orders (CCJs). Deposit disputes where a formal adjudication (TDS, DPS, MyDeposits) awarded damages to the landlord for property damage. Served statutory notices (e.g., Section 8 ground-based notices). Mutual formal end-of-tenancy sign-off checks. What is Banned: Free-text opinion boxes or star ratings. Subjective claims about personal cha