Last reviewed: Next review due:
Why UK universities are subject to FOIA
Universities and other higher education institutions that receive public funding from the Higher Education Funding Council (now OfS in England, and equivalent bodies in Scotland, Wales, and Northern Ireland) are listed as public authorities in Schedule 1 to FOIA 2000. This covers the vast majority of UK universities — Russell Group, post-1992, specialist, and arts institutions. Further education colleges are also covered as public authorities.
Universities often behave as if they are private organisations. They are not. They spend billions of pounds of public money, charge tuition fees regulated by government, employ tens of thousands of staff with public functions, and enjoy charitable status. The public interest in transparency is strong — and universities have been required to respond to FOI requests since the Act came into force in 2005.
The Office for Students (OfS) regulates higher education providers in England and is itself subject to FOIA. HESA publishes substantial data about HE institutions. Before filing an FOI, check whether the data you need is already in HESA publications, OfS datasets, or the institution’s own published accounts.
High-value university FOI topics
- 1Vice-chancellor total remuneration: salary, bonuses, pension contributions, and benefits — including comparison with median staff pay.
- 2Gender pay gap data beyond the mandatory annual report: breakdown by faculty or department, or by academic grade.
- 3Student complaints: volume, categories, outcomes, and average resolution time — benchmarked against OfS and OIA national data.
- 4Academic freedom and free speech: number of speaker events cancelled or restricted; number of freedom of speech investigations; any settlements involving NDAs.
- 5Harassment and sexual misconduct: formal complaint volumes, outcomes, referrals to police, and whether accused staff remained employed during investigation.
- 6Redundancies: number of voluntary and compulsory redundancies by year and by school or faculty.
- 7Foreign donations: total income from foreign governments or state-linked entities by country; donations above the threshold requiring registration under the Higher Education (Freedom of Speech) Act 2023.
- 8Confucius Institute funding and governance: memoranda of understanding, income received, and any restrictions on academic content.
- 9Research integrity investigations: number of misconduct allegations received and investigated; outcomes and whether publications were retracted.
- 10IT and technology contracts: spend on student record systems, learning management systems, and enterprise software over £25,000.
Red flags in a university FOI refusal
- S.43 commercial interests cited for VC pay data — remuneration of executives of publicly funded bodies is not genuinely commercially sensitive.
- S.40 personal data claimed for aggregate complaint statistics — counts are not personal data.
- S.41 (breach of confidence) used for harassment complaint outcomes — the university has a public function in complaint handling.
- S.43 used for research income from commercial partners — the public interest in research integrity is strong.
- A blanket "not held" for Confucius Institute governance documents — if the institute operates from university premises, the university must hold the agreement.
- S.22 (future publication) cited for VC pay data without giving a specific publication date.
- S.36 (effective conduct of public affairs) cited for complaints data without sign-off from a qualified person.
University FOI request checklist
- Checked HESA publications, OfS datasets, and the university's own published accounts before filing.
- Checked the university's disclosure log or WhatDoTheyKnow for previous similar requests.
- Identified the correct FOI contact — most universities have a dedicated FOI officer in their legal or governance team.
- For Scotland: confirmed the body is subject to FOISA and the Scottish Information Commissioner.
- Specified the financial year or academic year for the data to match university reporting cycles.
- Asked for aggregate data (counts, totals, averages) rather than personal records.
- For pay data: requested the full remuneration package including pension and expenses, not just base salary.
- For complaints data: asked for breakdown by category, outcome, and year — not identifiable case files.
- Assessed any likely s.43 commercial interests argument and prepared a counter based on the public interest in HE accountability.
- Set a 20-working-day deadline reminder and prepared an internal review template for a refusal.
Build your university FOI request
Our FOI Request Builder includes higher education templates covering executive pay, complaints, and research integrity — ready to send to any UK university.
Open FOI Request BuilderCommon mistakes
- Requesting data already in HESA publications — likely refused under s.21 (accessible by other means).
- Accepting a commercial interest refusal for VC pay without challenging the public interest test.
- Asking for identifiable student records — properly refused under s.40, and not what you need for the story.
- Not checking the university's audited financial statements, which are publicly filed at Companies House or the Charity Commission.
- Treating universities as private organisations and not filing at all — they are public authorities and must respond.
- Not specifying whether you want academic year or financial year data — ambiguity leads to delays.
- Forgetting that Scottish universities are under FOISA and the Scottish Information Commissioner, not the ICO.
Related guides
School & Academy Trust FOI
Maintained schools, academy trusts, MATs, exclusions, and safeguarding data.
Central Government FOI
Departments, policy formulation exemptions, and ministerial transparency data.
Investigative Journalism Techniques
Using Companies House, charity accounts, and public records in investigations.
FOI Request Builder
HE sector templates for VC pay, complaints, and foreign donations.
Primary sources
- HESA — higher education statistics and datasets (hesa.ac.uk)
- Office for Students — regulatory data and access plans (officeforstudents.org.uk)
- Office of the Independent Adjudicator — annual complaints data (oiahe.org.uk)
- Higher Education (Freedom of Speech) Act 2023 (legislation.gov.uk)
- UCAS — application and acceptance data (ucas.com)
- WhatDoTheyKnow — university FOI requests (whatdotheyknow.com)
- ICO — Schedule 1 public authorities list (ico.org.uk)
Frequently asked questions
Are all UK universities subject to FOIA?
Yes. All higher education providers in the UK that receive public funding are listed as public authorities in Schedule 1 of FOIA 2000. This includes Russell Group universities, post-1992 universities, specialist institutions, and most further education colleges. Purely private higher education providers that do not receive public funding may not be covered — but this is a very small category. The Office for Students (OfS) is itself a public authority. In Scotland, universities are subject to FOISA 2002.
What executive pay data can I get from a university via FOI?
Vice-chancellor total remuneration is a high-profile FOI target. Under FOIA, universities must disclose VC salary, bonuses, and benefits-in-kind. Many universities also publish this in their annual accounts (audited accounts are publicly filed). You can also request: total remuneration for all staff earning above a threshold (e.g. £100,000+); the total pay ratio between the VC and median staff salary; severance payments to departing executives; and the composition and process of the remuneration committee.
Can I get data on harassment and sexual misconduct complaints via FOI?
Universities are often reluctant to disclose granular harassment and misconduct data. You can legitimately request: total number of formal complaints received in a year by category (sexual misconduct, harassment, bullying); number upheld and not upheld; average time to resolution; number of cases referred to external bodies. Universities sometimes claim s.40 (personal data) or s.41 (confidentiality). Aggregate counts are not personal data. Challenge s.41 claims by arguing that complaint handling by a public institution is not a private matter giving rise to a duty of confidence.
What are Confucius Institutes and why are they a FOI target?
Confucius Institutes are cultural and language centres on university campuses, typically co-funded by Hanban (now the Chinese International Chinese Education Foundation). Concerns have been raised about academic freedom, governance arrangements, and the nature of the funding relationship. Via FOI you can request: the amount received from Chinese government sources for the Confucius Institute; the governance agreement or memorandum of understanding; any complaints or disputes with the Chinese partner institution; and the process by which the university reviews Confucius Institute activities. Many universities have closed their Confucius Institutes since 2020, but you can still request historical data.
What HESA and UCAS data is already publicly available?
The Higher Education Statistics Agency (HESA) publishes annual data on student enrolments, completions, employment outcomes, and staff numbers by institution. UCAS publishes application and acceptance data by subject and institution. OfS publishes access and participation plan data. Graduate Outcomes data (what graduates do after their degree) is also published. Before filing an FOI to a university, check whether HESA already has the data at the level of granularity you need — if so, you will likely receive a s.21 (accessible by other means) response.