University of Cambridge

The complainant has requested a copy of an internal report into a confidential HR investigation. The University of Cambridge (‘the University’) refused to disclose the requested information, citing section 40(2) (personal information) of FOIA. The Commissioner’s decision is that disclosure would breach the data protection principles and therefore the requested information is exempt under section 40(2). The Commissioner does not require further steps.