Access to confidential academic reference

Question
Can I obtain a copy of a confidential academic reference written about me?

Short answer

There is no automatic right to obtain a copy of a genuinely confidential academic reference, but the position is more nuanced than a flat “no”. Whether you can get it, and in what form, depends on who holds it, whether it was truly given in confidence, and whether the reference contains information about you that can be disclosed without breaching the confidentiality that the law protects.

The confidential references exemption

The main obstacle is the specific exemption in the UK data protection regime. Under paragraph 24 of Schedule 2, Part 4 to the Data Protection Act 2018, the right of access does not apply to personal data consisting of a reference given, or to be given, in confidence for the purposes of a person’s education, training or employment (whether actual or prospective), a volunteer placement, appointment to an office, or the provision of a service. An academic reference for a course, further study, or a job falls squarely within this.

Importantly, the Information Commissioner’s Office confirms that this exemption applies regardless of whether you approach the organisation that wrote the reference or the organisation that received it. So making a subject access request to the university that provided the reference, or to the institution or employer that received it, does not defeat the exemption.

The key qualification: it must genuinely be “in confidence”

The exemption only bites where the reference was actually given in confidence. This is a factual question, not something the referee can simply assert after the event. Points that matter here:

If the referee or institution never treated the reference as confidential, or told you the reference was open, or if the relevant policy stated that references would be disclosed to you, the exemption may not apply and you may be entitled to a copy.

Universities and employers are expected to make clear, in advance, whether references are confidential, typically in a privacy notice, staff handbook or admissions or reference policy. If they have not done so, their ability to rely on confidentiality is weaker.

Confidentiality can also be waived. If the author of the reference agrees to disclosure, there is no obstacle to you receiving it.

Requesting it from the recipient of the reference

Even where the reference was given in confidence, the exemption protects the reference as a discrete piece of information. When you make a subject access request to the body that received it, they can and often do withhold the reference itself. However, decisions made using the reference, or your own personal data held separately, remain accessible. In practice, requesting your full file from the recipient sometimes yields the reference where the recipient did not itself receive it in confidence or where the confidentiality has broken down, but this cannot be relied upon.

Balancing where third party information is involved

A reference inevitably contains information about the referee as well as about you. Where an organisation is deciding whether to disclose, it has to balance your right of access against the referee’s rights and the duty of confidence. Even outside the specific references exemption, data protection law allows information about other identifiable people to be withheld unless it is reasonable to disclose it without their consent. This reinforces why references written in confidence are usually withheld.

Practical routes to seeing the content

1. Ask the referee directly. Many academics are willing to share, or summarise, what they wrote, or to give you an open reference. This is the quickest and least confrontational route.

2. Check the institution’s reference and privacy policies. If the policy does not clearly state that references are confidential, or indicates that references may be shared with the student, raise this and request disclosure on that basis.

3. Make a subject access request anyway, to the writer and to the recipient. You lose nothing by asking. Ask specifically for confirmation of the legal basis for any refusal and which limb of the exemption is relied upon. Sometimes organisations disclose more than they are strictly required to, or provide a redacted version or a summary.

4. Seek the referee’s consent. If the author agrees, the confidentiality falls away and it can be handed over.

If disclosure is refused

If you make a subject access request and the reference is withheld, the organisation should tell you it is relying on the confidential references exemption. If you believe the reference was not genuinely given in confidence, or that no confidentiality was ever established, you can complain to the organisation’s data protection officer and then to the Information Commissioner’s Office. The ICO can consider whether the exemption was correctly applied on the facts.

Other contexts

If your real concern is that a reference is inaccurate or defamatory and has caused you loss, that is a separate issue from access. A referee owes a duty of care to take reasonable care in preparing a reference, and an inaccurate reference that causes loss can give rise to a claim, but establishing this requires evidence of what was written and of the harm caused, which is difficult precisely because you may not be able to see the document.

What would change the answer

The outcome turns on several facts you have not given: who currently holds the reference; the exact purpose it was written for; whether the institution’s policy said references were confidential; whether you were ever told it would be open or shared; and whether the referee would consent to disclosure. If you can tell me who holds the reference and what any relevant policy says about confidentiality, I can give you a more precise view on your prospects of obtaining it.

Current sources checked

This answer draws on broad legal knowledge and checks current law, guidance and procedure against relevant sources.

Confidential references - Data Protection Act 2018legislation.gov.ukWhat exemptions are relevant for SARs? | ICOico.org.ukSubject access request Q and As for employersico.org.ukInformation Access Templates – UK General Data Protection Regulation (UK GDPR) & Data Protection Act 2018 (DPA)ico.org.uk
Verify important information before relying on it.
Was this helpful?
0 people found this helpful

Ready to stop guessing?

The above is just an example answer. Sign up now to get personalised guidance and ask follow-up questions based on your own situation. Bring your legal issue, your contract, or your question. Lawyer Destroyer gives you clear, practical guidance so you can move forward with confidence.