University for the Creative Arts

The complainant has requested information about data protection handling and governance. The University for the Creative Arts (UCA) refused information in scope of part one of the request under section 40(1) of FOIA (applicant’s own personal data). UCA directed the complainant to published information in response to part four of the request. UCA stated that it held no further information in scope of the request. The Commissioner’s decision is that UCA does not hold further information in scope of the request. As UCA did not provide a response to the request within 20 working days the Commissioner has recorded breaches of sections 1(1) and 10(1) of FOIA. As UCA did not provide a refusal notice stating its application of section 40(1) to refuse information in scope of the request within 20 working days, the Commissioner has also recorded a breach of section 17(1) of FOIA. The Commissioner does not require further steps.