
INFORMATION COMPLIANCE TEAM
University Offices, Wellington Square, Oxford OX1 2JD
Ref: 202407/640
15 August 2024
Reply to request for information under the Freedom of Information Act
Your ref
Email of 17 July 2024
_
I am writing to you to request the Review of the Permanent Private Halls Associated with the
Request
University of Oxford dated 2007 and any pertinent reports regarding the permanent private
halls (PPHs) in the same year. The Review contains a list of 34 recommendations to the PPHs.
Dear Kieran Nevin
I write in reply to your email requesting the information detailed above. Please find the information requested
at the annexes to this letter.
We have redacted the names of those involved in the review as we consider this information to be exempt from
disclosure under section 40(2) of the Freedom of Information Act (FOIA). Section 40(2) provides an exemption
from disclosure for information that is the personal data of an individual other than the requester, where
disclosure would breach any of the data protection principles in Article 5 of the General Data Protection
Regulation (GDPR). We consider that disclosure of the information requested in the exact form requested would
breach the first data protection principle, which requires that personal data is processed lawfully, fairly and in a
transparent manner. Disclosure would be unfair to the individuals concerned, as it would be contrary to their
reasonable and legitimate expectations. They would not reasonably expect that information about them would
be made public under the FOIA without their consent.
For the disclosure of personal data to be lawful, it must have a lawful basis under Article 6 of the GDPR. There
are six possible lawful bases in Article 6; we do not consider that any of them would be satisfied in respect of
the disclosure.
The exemption in section 40(2) is an absolute exemption and is not subject to the public interest test provided
for in section 2(2)(b) of the FOIA. To the extent that the public interest is relevant in this case, the University
considers it is satisfied by the information provided.
INTERNAL REVIEW
If you are dissatisfied with this reply, you may ask the University to review it by e-mailing
xxx@xxxxx.xx.xx.xx.
A request for internal review should be submitted no later than 40 working days from the date of this letter.
THE INFORMATION COMMISSIONER
If, after the internal review, you are still dissatisfied, you have the right under FOIA to apply to the Information
Commissioner for a decision as to whether your request has been dealt with in accordance with the FOIA. You
can do this online using the
Information Commissioner’s complaints portal.

2
Yours sincerely
Information Compliance Team