We use cookies on this site. By browsing our site you agree to our use of cookies. Close this message Find out more

Home > About us home > Governance > Access to information
More in this section Access to information

Information Compliance

Information from the College is released for many reasons and to many people on a daily basis.  In addition to the release of general information in response to routine enquiries the College is required to deal with requests arising from statutory rights of access provided by the Data Protection Act 1998, the Freedom of Information Act 2000 and the Environment Information Regulations 2004. Compliance with each piece of legislation places obligations on the College about how requests are processed and handled.

The information below provides brief guidance.  If you require further information or help with a request please contact FOI@royalholloway.ac.uk.

Data Protection Collection Notice

For students

The College has a notification under the Data Protection Act 1998 to hold personal data about its students, for example, data about your admission, academic background, course registration and academic progress while at Royal Holloway, together with information about your accommodation and that collected for the purposes of equal opportunities monitoring.

This data is processed for various administrative, academic and health and safety purposes.  It is processed in accordance with the provisions of the Act and is only disclosed as necessary.

The College is required to send some data to organisations to whom we have statutory obligations, such as the Higher Education Statistics Agency (HESA).  You can access their Student Data Collection Notice here.

For staff

You can access HESA's  Staff Data Collection Notice here

Data protection (DPA)

The Data Protection Act 1998 protects the rights and privacy of individuals and ensures that data about individuals is not processed without their knowledge and with their consent where possible.

The Data Protection Act covers data held in electronic format and manual data held in a relevant filing system. 

Royal Holloway is a data controller and registered with the Information Commissioners Office as required under the Data Protection Act.  The College will only process personal data in accordance with the College's notification and current Data Protection Legislation.  The College's entry on the Data Protection Register can be found by searching the ICO web page.

The Data Protection Act requires that processing should be carried out according to the eight Data Protection Principles. These are outlined below:

  1. Be obtained and processed fairly and lawfully and shall not be processed unless certain conditions are met.
  2. Be obtained for a specified and lawful purpose and shall not be processed in any manner incompatible with purpose.
  3. Be adequate and relevant and not excessive for those purposes.
  4. Be accurate and kept up to date.
  5. Not kept for longer than is necessary for that purpose.
  6. Be processed in accordance with the data subject's right.
  7. Be kept safe from unauthorised access, accidental loss or destruction.
  8. Not be transferred to a country outside the European Economic Area unless that country has equivalent levels of protection for personal data.

The College and all staff or others who process or use any personal information must ensure that they follow these principles at all times.

The College's Data Protection Policy can be found at Data Protection Policy.

Data security

Unauthorised disclosure of personal data could result in criminal proceedings against the College. All staff are responsible for ensuring that any personal data they hold is kept securely to ensure that:

  • there is no unauthorised access to, alteration or destruction of the data
  • there is no unauthorised disclosure, either orally or in writing, of the data
  • there is no accidental loss or destruction of the data
  • there is no accidental disclosure, either orally or in writing, of the data to any unauthorised third party.

Individual rights under the Data Protection Act

Staff and students and other users of the College have the right to access any personal data kept about them on computers or in manual filing systems. Any requests for personal data (known as subject access requests) should be made using this form: Subject Access Request form.

A verification of identity may be required. The College may also charge a fee of £10 as specified in the Act. Information will be provided to the requestor within 40 calendar days.

If, as a member of staff you receive a subject access request please forward it as soon as possible to FOI@royalholloway.ac.uk.

Responsibilities of staff

Staff have responsibilities both as data subjects and data users. All members of staff are responsible for:

  • checking that any information they provide to the College in connection with their employment is accurate and up to date
  • informing the College of any changes to information they have provided e.g. changes of address. This can be done through MyView
  • checking information that the College will send out from time to time, giving details of information kept and processed.

If, as part of their responsibilities, staff collect information about other people they must comply with the Data Protection Principles, the content of the Data Protection policy and advice given by the Data Protection Officer.


Responsibilities of students

Students must ensure that all personal data provided to the College is accurate and up to date. They must ensure that changes of address and other information held by the College about them are notified to Registry. Students processing personal data as part of their course should do so under the supervision of staff responsible for their course. Students processing personal data other than part of their course are required to make an individual notification to the Information Commissioner.

Freedom of information (FOI)

The Freedom of Information Act 2000 came into force in January 2005. It is intended to make public authorities more open and accountable. The Act places two main responsibilities on public authorities:

  1. To produce a Publication Scheme and Guide to Information identifying all the information that the College already publishes. The College follows the model publication scheme for higher education institutions approved by the Information Commissioner's Office (ICO).

  2. To respond to requests for information. This gives individuals the right to request recorded information held by the College. They have the right to be told whether or not the information is held and, if it is, to have the information communicated to them.

The Publication Scheme follows the model publication scheme.

Requests for information

Freedom of Information requests must be made in writing and have a valid address to respond to.

Public authorities must respond to a request within 20 working days.

The Act is "requestor blind" so all requests have to be treated the same way. However, there may be occasions when this does not apply e.g. if the request is for personal data or if the request could be considered vexatious or repeated.

The Freedom of Information Act contains a number of exemptions, which specify the circumstances when public authorities are not obliged to provide information.

Royal Holloway is committed to being as open and transparent as possible, however, on some occasions it may be appropriate to apply an exemption.  Below is a brief guide to the exemptions which are most likely to be used:

  • Information about other people - personal information about third parties is exempt if disclosure would be contrary to the data protection principles set down in the Data Protection Act.
  • Information provided in confidence where disclosure of information would constitute an actionable breach of confidence. 
  • Commercially sensitive information where disclosure of information would prejudice the commercial interests of Royal Holloway or another body.
  • Information where disclosure would endanger the health and safety of other people.
  • Information which is readily accessible by other means. This applies to information that is readily available elsewhere e.g. on the College's website or published elsewhere.
  • The College may also decline to release information if it is intended for future publication.  

The College may also refuse a request if the cost of locating or extracting the information is estimated to exceed the appropriate limit. This has been set at £450 or 18 hours of staff time at the rate of £25 per hour. This rate is the same for any member of staff who deals with the request.

Making an FOI request

Although requests can be sent to any staff member we recommend that requests are sent to the following address to ensure that they are dealt with promptly.


Freedom of Information
Royal Holloway, University of London
Surrey  TW20 OEX

The request should include a name, an address for correspondence and the address the information should be sent to (if different) as well as a description of the information requested.

In order to ensure that we have understood a request we may ask for further clarification about the information required.  Once a request for the clarification has been made the 20 working day response time stops until a reply is received from the requestor.

When replying to a request the College will confirm or deny whether the information is held by the College. If we hold the information we will either provide it or explain how it can be accessed. If we cannot provide the information we will explain why the decision was made to apply an exemption. We will also explain what to do if you are not satisfied with the way the request has been handled. 


If you are not satisfied with the response to your request you can request an internal review by writing to:

Deputy College Secretary - Secretariat@royalholloway.ac.uk

Or by post to:

Deputy College Secretary
Royal Holloway, University of London
Egham Hill

 You can also read our complaints procedure.

Environmental information regulations (EIR)

The Environmental Regulations 2004 allow public access to information held by a public authority which relates to the envirionment in the following areas:

  • air
  • water
  • soil
  • land
  • flora and fauna
  • biodiversity
  • emissions
  • noise
  • energy 
  • waste
  • health & safety.
The main differences between the EIR and FOI are:

  • requests for information under EIR do not have to be made in writing
  • requests cannot be refused on the grounds of cost.
  • there are no absolute exemptions, there are exceptions that can be used to refuse a request but these are subject to a public interest test.

Although requests under the EIR do not have to be made in writing you should make a request under EIR by emailing FOI@royalholloway.ac.uk. This will help us to provide an appropriate response to your request. Alternatively, please call 01784 276244.

Further information can be found on the Information Commissioners Office website.


Comment on this page

Did you find the information you were looking for? Is there a broken link or content that needs updating? Let us know so we can improve the page.

Note: If you need further information or have a question that cannot be satisfied by this page, please call our switchboard on +44 (0)1784 434455.

This window will close when you submit your comment.

Add Your Feedback