Changeflow GovPing Data Privacy & Cybersecurity University of Suffolk FOI Exemption Upheld
Routine Rule Added Final

University of Suffolk FOI Exemption Upheld

Favicon for ico.org.uk ICO Decision Notices
Published
Detected
Email

Summary

The Information Commissioner's Office (ICO) has issued a Decision Notice finding that the University of Suffolk correctly relied on section 40(2) of the Freedom of Information Act 2000 (FOIA) to withhold information concerning student nationalities attending specific courses. The Commissioner does not require further steps to be taken.

“The Commissioner's decision is that the University has correctly relied on section 40(2) of FOIA to withhold the information.”

ICO , verbatim from source
Published by ICO on ico.org.uk . Detected, standardized, and enriched by GovPing. Review our methodology and editorial standards .

What changed

The ICO formally determined that the University of Suffolk lawfully withheld a breakdown of students' nationalities under section 40(2) of FOIA, which protects third-party personal information. The decision concerns a request spanning September 2016 to 7 April 2025. The finding carries no enforcement consequence and concludes the complaint.

Universities and other public authorities that receive similar FOI requests for student nationality data should note that section 40(2) provides a valid basis for withholding where the information constitutes personal data of third parties. Consistency in applying the exemption and maintaining supporting documentation of the harm test applied are advisable.

Archived snapshot

Apr 22, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

University of Suffolk

  • Date 21 April 2026
  • Sector Education
  • Decision(s) FOI 40(2): Not upheld The complainant has requested a breakdown of students’ nationalities who attended specific courses between September 2016 and 7 April 2025. The University of Suffolk (the University) relied on section 40(2) of FOIA (third party personal information) to withhold some of the information within the scope of question 2 of the request. The Commissioner’s decision is that the University has correctly relied on section 40(2) of FOIA to withhold the information. The Commissioner does not require further steps to be taken.

Named provisions

FOI 40(2)

Get daily alerts for ICO Decision Notices

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from ICO.

What's AI-generated?

The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.

Last updated

Classification

Agency
ICO
Published
April 21st, 2026
Instrument
Rule
Branch
Executive
Legal weight
Binding
Stage
Final
Change scope
Minor

Who this affects

Applies to
Educational institutions
Industry sector
6111 Higher Education
Activity scope
FOI request handling Data withholding
Geographic scope
United Kingdom GB

Taxonomy

Primary area
Data Privacy
Operational domain
Compliance
Compliance frameworks
GDPR
Topics
Information Law Education

Get alerts for this source

We'll email you when ICO Decision Notices publishes new changes.

Free. Unsubscribe anytime.

You're subscribed!