GDPR - universities
Long story short - I was falsely accused of harassment and stalking. It was dropped by the police but the university continued. Under gdpr, the only specifically protected information that universities do not have to provide is academic information and protected references.
This leads to the absurd conclusion that investigations into misconduct are entirely accessible as long as they contain means by which I can be identified. Can I use this to access deliberations about myself made by staff members?
More concerning, supplementary data guidance states that I am entitled to the identities of data recipients, and to categories if such a request is impossible or manifestly unfounded. So am I entitled to the identity of the students who have complained about me if they received my personal data of the outcome? Such as X person has been fined. According to the guidance maybe?
What I want to find out is what medical information was given to staff members in the organisation, and how this was shared, however the more information I can gather the easier it will be to complain or fight any decision of guilt.
On the one hand, it feels draconian that work with the expectation of privacy has already been handed over to me. On the other hand, it seems only to benefit me and I want to utilise as much as I can before being accused of making "manifestly unfounded" requests.
The information already handed over to me has been redacted so that it is unreadable, and I cannot differentiate between myself, the university, and NHS in emails. I have challenged to the ICO.