A person lists personal information about someone in a tenancy database only where that person was a named tenant, the agreement has ended, a reason prescribed by regulation applies (Regulation 2025 Part 7: an amount owed that exceeds the bond paid, or one week's rent if none, plus any tenancy guarantee, for rent left unpaid after a notice to remedy was not complied with, under a conciliation agreement or tribunal order whose time for payment has passed, or after abandonment unless an abandonment dispute is still before the tribunal; or a tribunal termination order for objectionable behaviour under s 345 or repeated breaches under s 347) and no tribunal order forbids it; and first gives the person a free copy of the information, at least 14 days to review and object, and considers any submission (unless they cannot be found, the information is in public court or tribunal records, or it is an amendment). No one lists information they know is inaccurate, incomplete, ambiguous or out of date.
This control maps to 4 controls across 2 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 4 it maps to, and the evidence behind each claim, over MCP and REST.