You are challenging a university decision but do not have the emails, meeting notes or records needed to understand it. A request for personal information may help, alongside a direct request for the evidence under the university’s procedure. The two routes have different purposes and should be managed without losing the complaint or appeal deadline.
Students and parents in England and Wales should start by identifying the records that would answer a specific question. Asking for everything can produce a large and confusing response. A focused request can be more useful while preserving the right to ask for wider personal information where that is genuinely needed.
Separate procedural disclosure from subject access
If the university relies on a report in disciplinary proceedings, ask for it through that process and explain why it is needed to respond, since fair procedure is a core Public Law principle when institutions make decisions about individuals. Do not assume that a subject access request is the only route to evidence or that a pending data request removes the institution’s procedural responsibilities.
A subject access request concerns your personal information and associated information about its use. The ICO explains the right to ask whether an organisation holds personal information and to request copies. It is not an unrestricted right to every document connected with a dispute. [1] Understanding that distinction helps frame both requests accurately.
Identify the decision you are investigating
Write down the factual question: who knew of an adjustment, when an assessment decision was made, what a meeting recorded or how a complaint was handled. Then identify the likely record categories and date range. Use the course, module, student number and relevant correspondence to help the university locate the material.
Avoid guessing at hidden motives when a document is missing. A clear request might ask for personal information in communications about the named adjustment during a defined period, including relevant meeting records. Explain the scope in ordinary language rather than relying on a long list of technical systems you do not know the university uses.
Send the request through an identifiable route
Check the university’s privacy notice or data-protection page for its contact arrangements. Keep a copy of the request and evidence of the date sent. If you use an online form, save the submitted text and confirmation. State how you would like to receive the information and any accessibility need.
You do not normally need a lawyer to make a request. If the university needs information to establish identity or clarify a request, respond appropriately and keep the correspondence. Ask it to explain any effect on the response timetable rather than assuming a delay is either automatically lawful or automatically a breach.
Keep the timetable realistic
The ICO’s public guidance says organisations usually have one month to respond, but lawful extensions and other rules can affect the calculation. Its guidance is also being updated following data-protection legislation changes. [1] Check the current requirements against the actual request and correspondence where timing becomes disputed.
A data request should therefore not be treated as an immediate solution to an appeal due tomorrow. Submit the material already available through the appropriate academic process, explain what is missing and ask for a defined extension or permission to supplement where needed. Obtain the university’s decision on that request in writing.
Understand why some material may be withheld
Access to personal information is also a Human Rights & Civil Liberties concern, but information about other people, legally privileged material and other categories may engage restrictions or exemptions. The university should consider the relevant rules rather than assume that every internal email is confidential and therefore unavailable. Ask it to identify the basis for a refusal sufficiently clearly to understand its position.
The ICO’s guidance explains that exemptions need to be applied and justified in context. [2] A redaction does not by itself prove concealment or misconduct. Equally, a response containing many redactions may require clarification about what categories were considered and why information within the scope was withheld.
Examination material has special rules
Do not assume that subject access guarantees a copy of an examination script. Specific provisions distinguish material recorded by candidates from other information, and examination marks can involve particular timing rules. The ICO addresses examination scripts and marks in its exemptions guidance. [2]
If your concern is marking or an assessment decision, also check the university’s academic procedure for feedback, moderation information or access to relevant records. A data-protection exemption does not answer every question about what should be available under a separate assessment or appeal process. State which route you are using and why the material matters.
Parents need appropriate authority
An adult student’s parent does not automatically gain access to university records because they pay fees or are trying to help. Agree what the student authorises and provide suitable evidence if the parent or adviser makes the request on their behalf. Keep sensitive information within that agreed scope.
If the student wants practical help but not full parental access, divide the tasks accordingly. A parent can assist with dates or organisation without receiving every health or disciplinary record. Where capacity or another legal issue affects consent, the appropriate authority needs individual consideration rather than an assumption based on the family relationship.
Review the response systematically
Keep the original response and work from a copy. Create an index by date and topic, and identify what each document establishes. Distinguish a staff member’s preliminary opinion from a final decision, and read email chains in context rather than relying on an isolated sentence.
Compare the response with the request and with documents you already hold. If an expected category is absent, ask whether it was searched, not held, outside scope or withheld. A precise follow-up identifying the missing period or record is usually more productive than stating that the entire response must be dishonest.
An illustrative use of the records
Imagine a student whose complaint response says the examinations team was never told of an agreed adjustment. The student already has an email forwarding the plan. A focused request may help establish whether related personal information exists in the relevant team’s communications and what action followed.
That hypothetical example shows how records can clarify a disputed chronology. It does not establish that every email must be disclosed or that finding an internal error automatically changes the academic outcome. The next step is to explain why the record matters under the applicable complaint or appeal ground.
If the response is late or incomplete
Raise the concern with the university’s data-protection contact, identifying the request, dates and specific problem. Keep its answer and check the ICO’s current complaint guidance if the matter remains unresolved. A complaint to the ICO concerns information rights; it does not itself overturn a mark or disciplinary finding.
Continue managing the university dispute separately, as sound Dispute Resolution means keeping the records request and the complaint or appeal on their own timelines. If the records could materially affect an imminent hearing, notify the relevant decision-maker and request the procedural step needed. Do not assume that every process stops while a data complaint is considered, or that a future disclosure will automatically reopen an expired appeal.
Preserve records you already possess
A request to the university should complement your own evidence preservation. Save the original decision emails, attachments and portal notifications before access changes or an account closes. Keep dates and file names intact. If you make a working chronology, distinguish entries supported by records from entries based on memory. That gives you a reliable basis for comparing the eventual disclosure with the information available when the decision was made.
How Aldwych Legal can assist
Adam Hussain’s experience in Education Law and data-protection-related matters informs Aldwych Legal’s work on university records, evidence and institutional decisions. The firm can help identify the information needed, prepare a proportionate request and assess how a response supports an academic appeal or complaint. The value lies in connecting the records to the actual issue being decided.
Students and parents can contact info@aldwychlegal.com or call or WhatsApp 020 4584 2472. Provide the decision, request already sent, university response and approaching deadline. Aldwych Legal supports matters across England and Wales, with appropriate authorised professional assistance arranged where reserved proceedings are required.
About Adam Hussain
Adam Hussain is Aldwych Legal’s Founder & Managing Director and head lawyer. His education and data-protection-related work includes examining records, chronology and institutional decisions. Targeted evidence requests can support a properly focused university complaint or appeal. He holds an LL.M. in International Business Law from King’s College London, has completed Bar training and Practical Legal Training, and is a PhD doctoral researcher in Legal Science at Royal Holloway, University of London.
