Where in the University does legal responsibility for the FOI Act actually rest?
Any enforcement notice would be served on the ‘public authority’ (ie in our case ‘the University’) as an entity. However there is an important exception. Individual staff members can be criminally liable at a personal level if they destroy information (or instruct others to destroy information) following the receipt of a valid request.
