Stars, Slanders and Screenshots: How a UK Business Should Handle a Damaging Review

For most trading businesses, the online review has become an unavoidable feature of the commercial landscape. A rating appears, sometimes critical and sometimes venomous, and the first instinct of the person who built the business is to answer it immediately. That instinct is understandable. It is also, quite often, the moment at which a modest reputational irritation becomes a legal problem.

This article sets out how the law in England and Wales applies to online complaints, why the manner of response matters as much as the original post, and how a business should work through a damaging review in a disciplined sequence rather than a reactive one.

Where the line actually falls

Not every unfair review is defamatory, and not every defamatory review is worth pursuing. A statement is defamatory if it tends to lower the claimant's reputation in the eyes of right-thinking people, but since the Defamation Act 2013 a claimant must also clear the serious harm threshold under section 1. For a body that trades for profit, serious harm means serious financial loss, and that must be pleaded and evidenced rather than assumed. One disgruntled customer on a review platform will seldom satisfy that test; a sustained campaign alleging fraud, unsafe practice or dishonest billing is a different matter.

Three defences do most of the work in this area. Truth under section 2 requires the publisher to prove the substantial truth of the sting of the allegation. Honest opinion under section 3 protects comment that indicates the basis of the opinion, provided an honest person could have held it on facts existing at the time. Publication on a matter of public interest under section 4 protects responsible journalism on a subject of genuine public concern. Each is a defence to be assessed on the actual words used, not on the general grievance behind them.

Two further causes of action are often overlooked. Malicious falsehood can apply to a false statement published with malice that causes financial loss, and does not require reputational harm in the defamation sense. Harassment under the Protection from Harassment Act 1997 may be relevant where a course of conduct, such as repeated posts, emails and calls, crosses into oppression. Both are narrower than business owners tend to expect, but both have their uses where the conduct is persistent rather than merely rude.

The reply that makes things worse

The most common self-inflicted injury in this area is the robust public response. Two principles explain why.

First, the repetition rule: a person who repeats a defamatory allegation can be liable as if they had made it themselves. Quoting the offending review in a detailed rebuttal, or paraphrasing it in a pinned social media post, can enlarge the audience for the allegation and create a fresh publication.

Second, public replies are published to the world at large. The qualified privilege that may attach to a candid response to the customer directly does not survive the moment the same words are posted on a public forum. A sarcastic reply that implies the customer is dishonest or vexatious may itself be actionable, and it hands the other side a counterclaim and a narrative.

A better practice is to acknowledge publicly only what is factual and unembarrassing — that the matter is being looked into, that the business takes the concern seriously, and that the customer has been invited to make contact — and to conduct the substantive exchange privately.

Consumer review clauses are not a free hand

The consumer protection provisions of the Digital Markets, Competition and Consumers Act 2024, now in force, restrict the extent to which businesses can suppress or control consumer reviews. Contract terms or practices that prevent consumers from leaving negative reviews, or that present reviews as though they were verified when they were not, carry regulatory risk. A non-disparagement clause in a business-to-business contract may still have value, but it should be drafted with precision and is no substitute for a proper response strategy.

Platform requests and the limits of section 5

Many businesses assume that a platform can simply be required to remove a review. In practice, takedown is usually a matter of the platform's own content policy rather than statute. Section 5 of the Defamation Act 2013 provides a defence for operators of websites in relation to user-generated content, but the regulations intended to give it practical effect were never brought into force, so its protection is narrower than its reputation suggests. Where a court order is needed, section 13 provides a route to require an operator to remove content, but that is litigation, with litigation's costs and timescales.

Complaints to platforms tend to succeed where the review breaches a specific published rule — for example, where it contains personal data, threats, hate speech, or content from someone who was never a customer. Framing the complaint around those rules, with evidence, is more productive than asserting defamation, which most platforms will not adjudicate.

Do not overlook data protection. A review containing personal information about an employee, or a request to have search results de-indexed, engages the UK GDPR. The journalism exemption is not a blanket shield, but nor is erasure a routine remedy, and expectations should be calibrated accordingly.

A triage checklist for owner-managers

1. Pause. Impose a short internal embargo — 24 to 48 hours is usually enough — before any public response. Nominate one person to hold the account.
2. Preserve. Capture the review, the URL, the timestamp, the reviewer's profile and the full page including surrounding context. Screenshot with the date and time visible and export the page as a PDF. Do not edit or delete internal messages about it.
3. Identify. Is the reviewer a customer, a competitor, a former employee, or unidentifiable? Records, booking systems and order histories will usually settle the question.
4. Classify. Does the review assert facts capable of being proved false, or express opinion? Is the sting an allegation of dishonesty or incompetence, or simply dissatisfaction?
5. Assess harm. Is there evidence of lost business traceable to the review? Quantify it where possible.
6. Check the terms. Does the platform's own policy provide a removal route? Is the reviewer bound by any contractual term?
7. Escalate deliberately. A solicitor's letter carries weight but also signals a dispute. Consider a short, measured request for removal or amendment before any pre-action step under the media and communications protocol.
8. Record the response. Publish a single, factual, courteous reply and leave it there.

The longer view

Litigation over a single review is rarely proportionate. Courts are alert to the chilling effect of defamation claims on ordinary consumer comment, and the costs of a contested claim will usually dwarf the commercial damage complained of. The more effective response is usually structural: a prompt private resolution, a visible and calm public reply, and a habit of collecting good reviews so that one hostile voice is heard in context.

Where the allegation is serious, sustained or plainly calculated to injure, however, the position is different. In those cases speed matters, but so does discipline. Take advice before you type.