Objecting to university equality-monitoring data

Short answer

In almost all cases you can decline to give equality-monitoring information, and universities are expected to design their forms so that answering is optional. Whether you have a formal legal right to object under data protection law depends on the lawful basis the university is relying on. Where the collection is genuinely voluntary and based on your consent, you simply do not have to provide it, and you can withdraw consent later. Where the university is relying on a different lawful basis, your ability to object is more limited, but the data must still be handled in a restricted and protected way.

What kind of data this is

Information about your ethnicity, religion or belief, sexual orientation, and (to the extent it reveals it) gender identity is special category personal data under Article 9 of the UK GDPR. Special category data attracts stronger protection than ordinary personal data. To process it lawfully the university needs both a lawful basis under Article 6 and a separate Article 9 condition, and for many of the conditions it must also meet a condition in Schedule 1 to the Data Protection Act 2018 and keep an Appropriate Policy Document explaining how it complies.

The lawful basis usually determines your rights

Most universities collect equality-monitoring data in one of two ways, and this matters a great deal for what you can do.

The first and most common approach is explicit consent. Here the university asks you to volunteer the information, usually with a clear “prefer not to say” option on the form. If consent is the basis, you are free not to answer, you can leave the field blank or select “prefer not to say”, and you can withdraw your consent afterwards and ask them to stop processing and delete what you gave. Consent must be freely given, so you should not be disadvantaged in your studies or application for declining.

The second approach, used less often, is the substantial public interest condition for equality of opportunity or treatment. This is set out in the Article 9(2)(g) route combined with paragraph 8 of Schedule 1 to the Data Protection Act 2018, which expressly permits processing of data about racial or ethnic origin, religious or philosophical beliefs, health and sexual orientation for the purpose of reviewing equality of opportunity or treatment between groups, with a view to promoting or maintaining it. Where a university relies on this condition rather than consent, it does not strictly need your permission, and your ability to refuse or object is weaker. In practice, however, the condition itself contains a safeguard: an individual has the right to require the controller not to process their data for this purpose, and once you give written notice objecting, they must stop. Universities that use this basis are also required to keep the data separated from other records and to use it only for monitoring.

Your data protection rights in practice

Your rights depend on the basis being used, so it is worth asking the university, through its privacy notice or data protection officer, which lawful basis and Schedule 1 condition applies to its equality monitoring. Most university privacy notices and Appropriate Policy Documents say this openly.

If the basis is consent, you have a strong position. You can decline, you can withdraw consent at any time, and you can ask for erasure of data already provided.

If the basis is the substantial public interest equality condition, the general right to object under Article 21 does not automatically apply in the same way, and the right to erasure is more limited because processing is not based on consent. However, the paragraph 8 safeguard gives you a specific route to require them to stop processing your data for monitoring by giving notice.

Regardless of the basis, you always retain the right to be told what is collected and why, the right of access to what they hold about you, and the right to have inaccurate data corrected.

Gender identity as a particular point

Data revealing that a person is transgender, or data about gender reassignment, can amount to special category data because it may reveal information about health or, in some framings, sexual orientation, and it also touches on the protected characteristic of gender reassignment under the Equality Act 2010. It is sensitive and should be handled with the same care. Legally recognised transgender status protected by a Gender Recognition Certificate carries additional confidentiality protection under section 22 of the Gender Recognition Act 2004, so if that applies to you the university must be especially careful about how it records and shares the information.

Why universities collect it

Before treating the request as something to resist, it is worth understanding the ordinary and lawful reason for it. Universities have duties under the public sector equality duty in section 149 of the Equality Act 2010 to have due regard to eliminating discrimination and advancing equality of opportunity. Anonymised, aggregated equality-monitoring data is how they evidence compliance and identify disadvantage. The data is normally used in statistical, de-identified form rather than to make decisions about you individually, and providing it is neither an admission nor something that should affect how you are treated. That context does not remove your rights, but it explains why refusing to answer usually carries no adverse consequence for you.

Practical next steps

1. Read the specific privacy notice or fair-processing notice attached to the monitoring form, which must tell you the purpose, the lawful basis and whether providing the data is optional.

2. If you simply do not want to give it, use the “prefer not to say” option or leave it blank. That is the intended and sufficient route in most cases.

3. If you want to know your formal rights, ask the university’s data protection officer which Article 9 condition and Schedule 1 paragraph they rely on, and confirm in writing that you object to your data being processed for equality monitoring.

4. If you have already provided the data under consent and want it removed, make a written request to withdraw consent and, if appropriate, ask for erasure.

5. If the university refuses to respect a valid objection or withdrawal, you can complain to the university under its data protection complaints procedure and, if unresolved, to the Information Commissioner’s Office.

Where the outcome could change

The key missing fact is which lawful basis your particular university uses, because that determines whether you can simply refuse (consent) or must instead serve a formal objection notice (substantial public interest). It can also matter whether the specific field is mandatory, for example where ethnicity data is required for statutory returns to the Higher Education Statistics Agency or the Office for Students, though even then the return is normally anonymised and you can still usually select “prefer not to say”. If the data is being used to make an individual decision about you rather than for aggregate monitoring, that would raise different and stronger concerns, and you should ask the university to justify it.