Appealing a rejected university application

Short answer Yes, most universities in England and Wales do allow you to challenge an admissions decision, but only on limited grounds. What is almost never available is an appeal simply because you disagree with the outcome or believe you deserved a place. Admissions decisions involve academic and professional judgement about your suitability, and that … Read more

University disclosing student data without consent

Short answer Yes, in many circumstances your university can confirm basic details such as your degree, classification, dates of attendance or student status to an employer or another organisation without asking you first. Data protection law does not require your consent for every disclosure of your personal data. Consent is only one of several possible … Read more

University reference disclosing personal information

Short answer Yes, in principle a university can include attendance records, disciplinary findings and even health information in an academic reference, but each of these engages data protection law and other legal duties, and there are meaningful limits on what a university can lawfully and safely include. Whether it should include a particular piece of … Read more

University data deletion rights

Short answer You have a right to ask, but not an absolute right to insist. The “right to erasure” (sometimes called the right to be forgotten) under Article 17 of the UK GDPR lets you request deletion of your personal data, and the university must comply in defined circumstances. However, this right is qualified. Universities … Read more

University record retention periods

The short answer There is no single fixed period set by law for how long a university in England and Wales can keep your records after you leave. Instead, retention is governed by data protection law, and each university sets its own published retention schedule within that framework. Most universities keep different categories of record … Read more

Data protection complaint against university

Two different things that are often confused When people talk about a “data protection complaint” to a university they are usually doing one of two things, and the time limits are different for each. It helps to be clear which you are making, because you can make both at once. The first is a data … Read more

Unauthorised access to student records

Short answer No. As a general rule, university staff must not access your student record unless they have a genuine, work-related reason to do so. Accessing personal data out of curiosity, for personal reasons, or without any legitimate purpose linked to their role is very likely to be unlawful under data protection law, and in … Read more

Access to confidential academic reference

Short answer There is no automatic right to obtain a copy of a genuinely confidential academic reference, but the position is more nuanced than a flat “no”. Whether you can get it, and in what form, depends on who holds it, whether it was truly given in confidence, and whether the reference contains information about … Read more

University charging for subject access request

Short answer Yes, but only within narrow limits, and a university cannot use “excessive” or “unfounded” simply because responding is inconvenient or because it dislikes the request. Under the UK GDPR (as supplemented by the Data Protection Act 2018) an individual has the right to make a subject access request (SAR) and, in most cases, … Read more

Retention of dismissed allegation on student record

Short answer Yes, in principle a university in England and Wales can keep a record that an allegation was made against you even where it was withdrawn, dismissed or not proven. There is no automatic legal right to have every trace of an unproven allegation deleted. However, any retention must comply with UK data protection … Read more

Recording meetings without consent

Short answer There is no single rule. Whether you can record without permission depends on the setting, who owns and controls the venue, what policy applies, and what you do with the recording afterwards. Making a private recording is not usually a criminal offence in England and Wales, but it can breach an institution’s rules, … Read more

University recording of students in classes

Short answer Yes, a university in England and Wales can lawfully record lectures, seminars and online classes in which students can be seen or heard, but only if it complies with data protection law. A recording that captures a student’s image or voice, or identifies them, is processing of their personal data under the UK … Read more

Right to know source of personal data

Yes, in most cases you can. Under data protection law in England and Wales you have two overlapping rights that can require your university to tell you where it got your personal information. The legal basis Your university is a data controller under the UK GDPR and the Data Protection Act 2018. Two provisions are … Read more

Access to university record data logs

Short answer There is no automatic legal right in England and Wales to be given a complete, ready-made “access log” showing every individual who has viewed, edited or downloaded your student record. However, you do have a data protection right to obtain a copy of your personal data and certain supplementary information, and in some … Read more

Secret recording by another student

The starting point: recording is not automatically unlawful It is important to separate two situations, because the law treats them very differently. First, the act of secretly recording you. Second, the act of sharing or publishing that recording. English law does not give you a general right not to be recorded, and there is no … Read more

Access to university meeting recording

Whether you can obtain a copy of a university meeting recording or transcript depends on three separate questions: whether a recording or transcript exists, what legal route you are using to request it, and whether any exemptions apply. The answer differs depending on whether you are asking as an individual who attended or was discussed, … Read more

University recording meetings without consent

Short answer There is no single rule that flatly prohibits a university from recording a meeting or telephone call. Whether it can lawfully record you without telling you depends mainly on data protection law, the university’s own policies, and the purpose of the recording. In practice, recording you covertly (without telling you) is generally difficult … Read more

Access to student data profiling

Short answer Yes, in most cases you have a legal right to find out that your university is creating risk scores, labels or profiles from your data, to see the personal data behind them, and to challenge them. The strength of your rights depends mainly on whether any decision affecting you is made in a … Read more

Learning analytics profiling by university

Short answer Yes, a university in England and Wales can, in principle, use learning analytics and AI to identify students who appear disengaged, at risk or likely to fail. This kind of profiling is lawful if the university complies with data protection law. But it is not unrestricted. You have significant rights over how your … Read more

Camera and room requirements in online classes

Short answer There is no single law that says a university can never ask you to switch on your camera, but nor is there a general rule that lets a university compel it in all circumstances. Whether a requirement is lawful depends mainly on data protection law (UK GDPR and the Data Protection Act 2018), … Read more