University recording meetings without consent

Short answer

There is no single rule that flatly prohibits a university from recording a meeting or telephone call. Whether it can lawfully record you without telling you depends mainly on data protection law, the university’s own policies, and the purpose of the recording. In practice, recording you covertly (without telling you) is generally difficult for the university to justify and will usually breach the transparency principle in data protection law, even though a covert recording is not automatically “illegal”.

Recording itself is not a criminal offence

Contrary to common belief, there is no general criminal law in England and Wales that makes it an offence for one participant in a conversation to record it. The Regulation of Investigatory Powers Act 2000 (interception rules) is aimed at intercepting communications on a public or private telecommunications system by someone who is not a party to the call. A person who is taking part in the meeting or call is not usually “intercepting” it. So a member of staff who is party to the conversation does not commit an interception offence simply by recording it.

That means the real controls come from data protection law and from the university’s contractual and policy obligations to you, not from criminal law.

Why data protection law is the key issue

An audio recording or transcript of a meeting or call from which you can be identified is your personal data under the UK GDPR and the Data Protection Act 2018. If the university (as an organisation) makes or keeps such a recording for its own institutional purposes, it is processing your personal data as a controller and must comply with the data protection principles.

The two principles that matter most here are lawfulness and transparency. The university needs a lawful basis to record (for example, legitimate interests, performance of a task, or consent), and it must normally tell you, at or before the time, that recording is taking place and why. The transparency principle (Article 5(1)(a) UK GDPR) and the information duties in Articles 13 and 14 mean that quiet, undisclosed recording sits uncomfortably with the law. Many universities’ own recording policies expressly say that participants should be informed and that covert recording is only permitted in exceptional, tightly controlled circumstances.

Covert recording by an organisation

The ICO treats covert recording, meaning recording done in a way designed to keep the person unaware, as something that can only rarely be justified. In the employment monitoring context the ICO says covert monitoring is unlikely to be justifiable in ordinary circumstances and is only defensible in exceptional cases, such as where it is necessary to detect suspected serious misconduct or criminal activity and telling the person would defeat the purpose. Where an organisation does consider covert recording, the ICO expects it to be authorised at senior level, supported by a data protection impact assessment, limited in scope, and used only where openness would prejudice the investigation. The same reasoning applies by analogy to a university recording a student meeting.

So a university that routinely records disciplinary, fitness-to-practise, complaint or academic-misconduct meetings without telling attendees would generally be acting inconsistently with these expectations. If it wants to record, the proper course is to tell you in advance.

What the university’s own rules usually say

Most universities in England and Wales have a published policy on recording meetings and handling personal data in recordings. These typically require that people are informed before a meeting is recorded, that the purpose and retention period are explained, and that covert recording is prohibited except in narrow, authorised circumstances. Because a university’s own regulations and policies are contractually binding on it in its dealings with students and staff, a breach of its recording policy is itself a ground of complaint, separate from any data protection point. It is worth locating the specific policy for your institution (often called something like a recording of meetings policy, data protection policy, or student disciplinary/complaints procedure).

Your rights and how to check what happened

If you think a meeting or call may have been recorded or transcribed without your knowledge, you can find out and challenge it:

1. Make a subject access request to the university asking for all personal data it holds about you, expressly including any audio recordings, transcripts, and notes of the meeting or call. The university must normally respond within one month and provide a copy.

2. Ask directly, in writing, whether the meeting or call was recorded or transcribed, on what lawful basis, what the retention period is, and who has access. This also creates a written record.

3. Check the privacy notice and recording policy that applied to you as a student or staff member to see what you were told, and whether the university followed its own rules.

If it was recorded without telling you

If the university did record or transcribe covertly and cannot properly justify it, your options, in a sensible order, are:

1. Raise it internally first, through the university’s data protection officer or its formal complaints procedure, setting out that you were not informed and asking for an explanation, deletion where appropriate, and confirmation of future practice.

2. Complain to the Information Commissioner’s Office if the university’s response is unsatisfactory. The ICO can investigate breaches of the transparency and lawfulness principles and can take regulatory action.

3. If you are a student who has exhausted the internal complaints process, you may be able to take an unresolved complaint to the Office of the Independent Adjudicator for Higher Education, which reviews how a university has handled a student complaint.

Court action for compensation under data protection law is possible but usually a last resort, because it involves cost, delay and litigation risk, and you would normally need to show you suffered damage or distress.

The other side of the point

It is worth noting the distinction between an organisation recording and an individual recording. If you, personally, want to record your own meeting or call with the university for your own protection, that is generally lawful for you as a party to the conversation, and the data protection rules are lighter for purely personal use, though sharing or publishing such a recording more widely can bring you within data protection obligations and can breach university rules. Some university procedures forbid students from recording meetings without permission, so check the applicable procedure before recording, and it is usually better to ask openly for the meeting to be recorded, or for both sides to keep an agreed note.

Key missing facts

The precise answer depends on some things you have not stated: whether the recorder is the university as an organisation or an individual member of staff acting for personal reasons; what type of meeting it was (a disciplinary or fitness-to-practise hearing, a supervision meeting, a complaint meeting, or an informal chat); whether you are a student, member of staff, or third party; and what your institution’s recording policy and privacy notice actually say. If you tell me these details, and what you are trying to achieve, I can be more specific about your strongest line of challenge.